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CHAPTER 8 

PERSONNEL SECURITY INVESTIGATIONS 



Section I. GENERAL 



8—1 . Purpose 

Security regulations, particularly AR 380-5, gov- 
erning classified material and information prov- 
ide that no person is entitled to knowledge or pos- 
session of classified defense information or mate- 
rial solely by virtue of his grade and position; 
that such will be entrusted only to those individu- 
als whose official duties require access to such 
knowledge; and that all such persons be cleared 
to receive this material or information on a 
“need-to-know” basis. One means employed to 
protect classified defense information and mate- 
rial from unauthorized disclosure is the conduct 
of personnel security investigations of those per- 
sons who have or will have access to classified de- 
fense information. This is done to insure that 
personnel concerned are of unquestioned loyalty, 
integrity, and discretion; of excellent character; 
and of such habits and associations that no doubt 
exists concerning their ability and judgment in 
properly handling such information. 



8—2. Types of Personnel Security Investiga- 
tions 

Personnel security investigations are of two 
types: National Agency Check (NAC), and Back- 
ground Investigation (BI). The type and scope of 
investigation required in any instance will depend 
upon the category of classified defense informa- 
tion to which a clearance for access is required 
and on the citizenship status of the individual 
concerned. General principles, supervision, con- 
trol, and procedures governing the conduct of 
these investigations are contained in AR 381-130 
and AR 604-5. When personnel security investi- 
gations are conducted on foreign nationals in ov- 
erseas areas, the scope of investigation will be 
prescribed by the responsible area commander. 
Chapter 7 and appendix B describe procedures 
used by counterintelligence personnel to report 
the results of personnel security investigations. 



Section II. CONDUCT OF BACKGROUND INVESTIGATIONS 



8—3. Scope of Background Investigation 

a. Most counterintelligence investigations are 
background investigations (BI). Their scope en- 
compasses fourteen component parts and gener- 
ally covers the last 15-year period of the individ- 
ual’s life to the date of the investigation, or from 
the subject’s 18th birthday to the date of investi- 
gation, whichever is shorter. 

b. The education and birth records checks, 
which are considered important parts of the BI, 
are conducted without regard to the time and 
date of birth limitations indicated above. The res- 
triction on the 15-year coverage, or the individ- 
ual’s 18th birthday, concerns the Special Agent 
only in that he is not required to deliberately seek 
information not within the usual period of cover- 
age unless a discrepancy develops during the in- 
vestigation. 



c. There are times when the period of coverage 
may be extended to any period of the individual’s 
life: 

( 1 ) In the event that such a step is necessary 
to substantiate or disprove derogatory informa- 
tion. 

(2) When extended coverage is required by 
competent authority. 

(3) When the individual is 17 to 19 years of 
age (the investigation will embrace coverage 
back to age 15). 

8-4. Components of a Background 
Investigation 

There are fourteen minimum components or re- 
quirements of a BI, all of which are significant in 
determining an individual's loyalty and suitabil- 
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ity. These components are prescribed in AR 
381-130 and AR 604-5 and are discussed individ- 
ually below. 

8-5. National Agency Check 

a. A National Agency Check (NAC) consists 
of a search of the records and files of appropriate 
national agencies for information bearing on the 
loyalty, trustworthiness, and suitability of indi- 
viduals under the investigative jurisdiction of the 
DOD establishment. Whether used as the basis 
for a clearance or as a part of a BI, the procedure 
is the same. The types of National Agency 
Checks, national agencies of concern, location of 
specific records, conditions under which these rec- 
ords will be examined, and pertinent administra- 
tive instructions are described in detail in AR 
381-130. 

b. The designation and processing of NACs are 
administrative responsibilities of the control 
office ; however, if during the course of an investi- 
gation there is indication that additional specific 
agencies should be checked, the Special Agent 
should recommend that such checks be made. 

c. The control office will extend the inquiry to 
obtain additional information as necessary in the 
event that derogatory or adverse information is 
received in reply to an inquiry or developed dur- 
ing the conduct of the investigation. 

8-6. Birth Records 

Examination of birth records is normally not in- 
cluded in a BI. If, however, in the course of the 
investigation a discrepancy is noticed in the date 
and place of birth as listed by subject on his DD 
Form 398, (Statement of Personal History), spe- 
cial effort is made to determine which informa- 
tion is correct. In establishing the correct date 
and place of birth, the best information is ob- 
tained from an official birth certificate or vital 
statistics records maintained by municipal, state, 
or other government agencies. The appropriate 
agency varies in different areas. Birth records 
may be kept by a bureau of vital statistics, de- 
partment of health, or similar agency, and may 
be maintained at state, county, city, or township 
level. Other methods of verifying birth informa- 
tion may be resorted to when no official records 
are available. In such cases, the investigator at- 
tempts to find the best information obtainable. 
Records of doctor, midwife, or a hospital may be 
used. The vital statistic files of a newspaper 
which carry birth announcements, especially in 



rural areas, may be accepted. Baptismal and 
church records may provide verification, as would 
entries in an old family Bible. In cases of adop- 
tions or of illegitimate births, the verification 
may require a check of court records, or inter- 
views with parents, guardians, or lawyers. In 
verifying birth data, the Special Agent must be 
careful that the information obtained is a verifi- 
cation and not merely a repetition of the original 
source of information. 

8—7. Education 

a. Time spent in high school or college repre- 
sents a formative period of an individual’s life, 
and much can be learned which may not be re- 
flected in the school records. It is important that 
in addition to a check of school records, personal 
interviews be conducted with teachers or others 
connected with the school who may have an inti- 
mate knowledge of the subject’s activities. Teach- 
ers at high school and college level generally 
have about four different classes every day, and 
the composition of these classes usually changes 
every 6 months. It can be expected that a teacher 
may not be certain that he knows the subject. 
Most schools publish yearbooks with individual 
photographs of students which can be used as an 
aid in identification. Some teachers may have 
more significant information than others, and 
these should be searched out. The Special Agent 
should not be satisfied with broad statements 
such as “John was a good student,” or “George 
showed subversive tendencies.” He must obtain 
facts and details; he should determine what the 
subject said or did that led to a conclusion con- 
cerning his character, integrity, and loyalty. In 
some areas, juvenile delinquency is not recorded 
on criminal records, but it may be found in school 
records. 

b. Extracurricular activities, as well as aca- 
demic achievements of the subject, should be con- 
sidered. Not only the names of organizations, but 
the subject’s degree of interest and participation 
should be determined. Mere membership in a sub- 
versive organization is not conclusive evidence of 
disloyalty. For example, some individuals are 
“professional joiners” and become affiliated with 
every club, society, or activity possible. Often 
they have little idea of the purpose or func- 
tions of these organizations and may have become 
members of subversive or front organizations 
without actual knowledge of that fact. No conclu- 
sive opinion can be based on the mere fact of 
membership in such an organization. The Special 
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Agent should intensify and extend the investiga- 
tion so as to prove or disprove any alleged sub- 
versive connections of the subject. Among the 
facts to be determined are subject’s contributions, 
activities, degree of association, and acceptance 
of the organization’s principles. 

8-8. Employment 

Employment records are examined in order to 
verify the period of employment and to determine 
details regarding the subject’s duties and general 
reliability. The reasons for termination of em- 
ployment are significant. Data extracted from 
employment records should be substantiated by 
obtaining additional information from individu- 
als familiar with circumstances reflected in re- 
cord entries, e.g., a coworker, supervisor, or em- 
ployer. In addition, such persons may provide in- 
formation concerning subject’s loyalty, character, 
behavior traits, and reputation. Unions and labor 
activities are primary targets for subversive ele- 
ments, and subject’s participation in union activi- 
ties may provide information concerning his par- 
ticular views and attitudes. However, member- 
ship in a union known to have been infiltrated by 
subversive personnel is not in itself evidence that 
the subject subscribes to objectives inimical to 
the United States. In such instances, an ex- 
tremely careful and sensitive investigation of the 
subject’s participation and affiliation in union ac- 
tivities is essential, in order for responsible au- 
thorities to reach objective and valid conclusions 
concerning its significance. 

8—9. References 

It can be assumed, in most cases, that listed ref- 
erences will be prejudiced in favor of the subject. 
Obviously, the subject selects as listed character 
references those people on whom he can best rely 
to furnish favorable information. 

a. Listed references may unwittingly reveal 
derogatory or adverse information during the in- 
terview concerning subject’s background, charac- 
ter, or activities, thinking that they are flattering 
the subject. 

b. Listed references are usually sources of 
leads to individuals who have knowledge of sub- 
ject’s background and associates, but who are not 
listed as references. 

c. Listed and developed character references 
are also the best sources for obtaining informa- 
tion regarding spouses, former spouses, or chil- 



dren, etc., who may be, for various reasons, omit- 
ted from DD Forms 398. Relatives of subject will 
not be interviewed as listed or developed refer- 
ences unless special circumstances warrant. 

d. Most people, when told the subject is under 
consideration for a position of trust and responsi- 
bility with the US Government or the Army, feel 
a moral obligation to be truthful. They are fre- 
quently more honest in appraising a subject than 
he may have anticipated when he listed them as 
rferences. 

8-10. Neighborhood or Residence 
Investigations 

The interview of persons residing in the vicinity 
of the subject’s residence may be conducted when 
considered necessary to the completion of the in- 
vestigation. 

8-11. Criminal Record 

When appropriate, or when information devel- 
oped from a NAC is not considered adequate, it 
may be necessary to check the records of police 
departments and other law enforcement agencies 
in the vicinity of subject’s past and present resid- 
ences and employment. Such checks are com- 
monly referred to as local agency checks. In all 
records checks, attempts are made to substantiate 
or verify the recorded information with testi- 
mony, evidence, and statements. Police records 
may show possible involvement in a crime, but 
court records may reveal that the subject was ac- 
quitted. On the other hand, acquittal may be 
based upon a legal technicality or upon a faulty 
indictment. Scrutiny of the actual trial record is 
important to obtain significant information; it 
may be derogatory to the subject or provide leads 
for further inquiry. While the Special Agent 
seeks the best evidence, facts, and definite infor- 
mation, he is also interested in rumor, hearsay, 
and opinion, if they are pertinent to the investi- 
gation and lend themselves to further develop- 
ment as leads. 

8-12. Military Service 

The service of an individual in the Armed Forces, 
and the type(s) of discharge will be verified. The 
verification of an individual’s present service is 
accomplished by a check of the local and major 
unit’s personnel files and by interviewing the im- 
mediate supervisor and coworker when required. 
Past service and type(s) of discharge received 
are components of the NAC and will be accom- 
plished by the control office. It is possible under 
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certain circumstances to execute administrative 
discharges for such activities as disloyalty, sub- 
version, indiscretion, or moral turpitude, and 
such discharges may not be honorable. It is, 
therefore, imperative that discharges not only be 
verified but the circumstances of the discharge be 
investigated. 

8—13. Foreign Countries 

Both the material and personal interest an indi- 
vidual may have in foreigners or foreign organi- 
zations, either domestic or abroad, must be con- 
sidered during the investigation, since coercion or 
pressure may be put upon such an individual 
through foreign relatives or investments. This 
does not necessarily indicate that an individual is 
untrustworthy, but it is a factor to be considered 
for the protection of both security and the indi- 
vidual. 

8—14. Citizenship Status 

The citizenship status of the individual must be 
established in every BI. In all cases where the 
subject is not a natural born United States citi- 
zen, the investigation should show whether he is 
a naturalized citizen, holds derivative citizenship, 
or is an alien. 

a. United States citizenship may be acquired in 
three ways — 

(1) Citizenship by birth. Records check of 
the individual’s birth will establish this type of 
citizenship. 

(2) Naturalized citizen. When the individual 
or his parents are naturalized citizens, the date 
and place of birth, as well as naturalization of 
the individual, are verified through records of the 
appropriate US District Court. If the place of na- 
turalization cannot be determined, Immigration 
and Naturalization Service (INS) records, Wash- 
ington, DC, are examined. Citizenship itself is not 
awarded by the INS, but is normally granted in a 
Federal or state court. 

(3) Derivative citizenship. 

{a) If a minor is brought into the US by 
his parents and the parents obtain US citizenship 
prior to the child’s 18th birthday, the latter may 
claim derivative citizenship. 

(b) An individual born outside the US, 
but whose parents are US citizens, may have dual 
citizenship. However, he can renounce citizenship 
of the country where born and claim US citizen- 
ship based on his parentage. He should have 
proof in the form of a “certificate of citizenship.” 



b. In verifying citizenship, the Special Agent 
should be familiar with the terms “alien” and 
“immigrant alien.” 

( 1 ) An alien is any person who is not a citi- 
zen of the US. 

(2) An immigrant alien is an alien who le- 
gally entered the US under an immigration visa 
for permanent residence. During a BI, the alien 
registration records will be checked at the INS 
District Office in the area that subject cur- 
rently resides in, to verify the date and place of 
legal entry into the US. If subject has moved to 
this residence since 1 January of the current 
year, the records of the INS, Washington, DC 
should be searched to obtain the required infor- 
mation. 

8—15. Foreign Travel 

If an individual has traveled outside the US 
within the last 15 years, except in military ser- 
vice, or while the dependent of persons in such 
service, records of the Department of State will 
be checked to determine the reasons for travel. 

a. Department of State records may have such 
information as dates of departure and return, 
destination and possible activities in which the 
individual was involved while abroad. 

b. The Central Intelligence Agency (CIA) may 
have information on foreign travel, activities, 
and connections of US citizens. However, their 
files do not antedate July 1946. 

8-1 6. Credit Records 

Whenever necessary, credit agencies and credit 
references will be checked. Credit record checks 
are made to determine the integrity and suitabil- 
ity rather than the loyalty of the individual. The 
investigation should be expanded if an indication 
of bad credit or lack of financial responsibility is 
revealed. All bad credit references obtained from 
financial institutions which were obtained from 
other firms should be checked with the reporting 
firm since errors do occur or the subject may 
have had a legitimate complaint which was later 
settled. 

8-1 7. Organizations 

a. When it is determined that the subject of a 
BI had or has affiliation or sympathetic associa- 
tion with subversive type persons or affiliation 
with, or membership in, subversive organizations 
as explained in AR 381-130, this association will 
be established in fact and included in the Agent 
Report of the BI. 
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b. Subversive elements make concerted efforts 
to infiltrate and penetrate all groups and organi- 
zations, to include educational institutions, labor 
unions, veteran groups, and fraternal organiza- 
tions. In view of this fact, all such associations by 
the subject should be reported. This serves not 
only to determine subject’s friends’ associates, 
and possible activities or ideologies, but also to 
provide a reference for future checks should any 
of these organizations later be determined to 
have subversive tendencies or membership. 

c. The frequent explanation that participation 
in subversive activities was due to immaturity, 
misplaced ideals, exercise of intelligence freedom, 
youthful impulsiveness, etc., is no basis for fail- 
ure of the Special Agent to report such informa- 
tion. The Special Agent must report all informa- 
tion reflecting on the subject. 

8—18. Divorce Records 

Appropriate court records will be reviewed for 
verification of pertinent information when the 
subject has been divorced. Further investigation 



may be conducted when essential to fair and pro- 
per resolution of the case. 

8—19. Derogatory Information 

a. . Suitability. If, during the course of a BI, 
credible information is received or developed 
which reflects adversely on the character, integ- 
rity, morals, or discretion of the subject, the con- 
trol office may change the case category to that of 
an expanded BI. AR 604—5 lists a number of suit- 
ability criteria; but information indicating that 
the subject has engaged in conduct falling within 
these criteria does not necessarily mean that he is 
unsuitable. It is only upon completion of appro- 
priate inquiry of investigation and review of all 
pertinent facts that a positive determination can 
be made. 

b. Loyalty. If, during the course of a BI, credi- 
ble information is received or developed which 
reflects adversely on the subject’s loyalty to the 
US, the control office may change the case cate- 
gory to that of a CTI. Chapter 9 explains the 
types and conduct of CTI. 
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CHAPTER 9 

COMPLAINT TYPE INVESTIGATIONS 



Section I. GENERAL 



9-1. Definition and Purpose 

A complaint-type investigation (CTI) is one in 
which sabotage, espionage, treason, sedition, sub- 
versive activity, or disaffection is suspected be- 
cause of the receipt or development of credible 
derogatory information. The primary purpose of 
each CTI is to produce information of such a na- 
ture, form, and reliability that the requesting 
agency (action agency) may determine the extent 
and nature of action, if any, necessary to insure 
the security of the Army. 

9—2. Incident and Personal Subject Cases 

Complaint-type investigations may be either inci- 
dent or personal subject cases. 

a. Incident Cases. Incident cases concern acts 
or activities which are committed by, or involve, 
an unknown person or group of persons. Exam- 
ples of incident cases are — 

(1) Fire of suspicious origin in a sensitive 
military installation. 

(2) The theft of classified documents from a 
military office by person or persons unknown. 

(3) The distribution of subversive or sedi- 
tious literature within a military installation by 
unknown persons. 

(4) Damage to equipment or supplies which 
is obviously manmade and malicious in nature. 

b. Personal Subject Cases. Personal subject 
cases involve one or more known persons. Exam- 
ples of activities or individuals which might re- 
sult in the conduct of personal subject complaint 
investigations include — 

(1) Membership or affiliation with one or 
more subversive organizations by a member of 
the US Army. 

(2) Collaboration with the enemy, or mis- 
conduct as a prisoner, by a member of the US 
Army in prisoner-of-war status. 

(3) Negligent loss or failure to promptly re- 



port the loss of defense information by the mili- 
tary custodian of such information. 

9—3. Complaint Type Case Categories 

All complaint cases, whether incident or personal 
subject type, will be assigned a specific case cate- 
gory for control, reporting, and statistical pur- 
poses. (See AR 381-125, and AR 381-130 for ex- 
planation and definitions.) These categories are — 

a. Sabotage 

b. Espionage 

c. Treason 

d. Sedition 

e. Subversive activity 

f. Disaffection 

9-4. Conduct and Control 

a. Instructions concerning the control and di- 
rection of complaint investigations are prescribed 
in AR 381-130 and AR 604-10. 

b. Investigation of cases which contain allega- 
tions that, if proved, would constitute offenses 
under civil or military law are conducted with a 
view toward developing information of sufficient 
probative value to permit its use in the appro- 
priate civil or military court. However, such in- 
vestigations should not be limited to the produc- 
tion of evidence, and the investigative reports 
should include all relevant and material informa- 
tion inadmissible in a civil or military court of 
law. 

c. The scope of knowledge and skills which the 
Special Agent must possess to successfully con- 
duct CTIs encompasses all aspects of the tech- 
niques and procedures described in chapters 3 
through 7. Special Agents assigned to conduct 
complaint-type investigations must also have a 
thorough understanding of the objectives and op- 
erations of hostile espionage, sabotage, and sub- 
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versive organizations (FM 30-17A). Extensive 
counterintelligence investigative experience is 
usually an essential requirement for Special 
Agents designated to conduct CTIs. Equally or 

Section II. SABOTAGE 

9—5. General 

The essence of the crime of sabotage, Title 18, 
United States Code, chapter 105, sections 
2151-2156, is the deliberate injury, destruction, 
or defective production of national defense or 
war materials by either an act of commission or 
omission. Because the first indication of sabotage 
normally will be the discovery of the injury, de- 
struction, or defective production, most sabotage 
investigations will be incident type cases; i.e., 
cases involving an unknown person or persons. It 
can be anticipated that acts of sabotage, both in 
overseas areas-of-operation and in CONUS, will 
increase significantly in future wars, regardless 
of the type or level of conflict. Sabotage is a par- 
ticularly effective weapon of guerrilla and par- 
tisan groups, operating against logistical and 
communications installations in occupied hostile 
areas, and of insurgents in internal defense oper- 
ational areas. Acts of sabotage may be committed 
by trained saboteurs sponsored by hostile guer- 
rilla, insurgent, or intelligence organizations ; 
they may be conducted by individuals operating 
independently and motivated by revenge, hate, 
spite, or greed. In an internal defense or limited 
war situation where guerrilla forces are active, 
care must be taken to distinguish those acts in- 
volving clandestine enemy agents or dissatisfied 
friendly personnel from overt acts of war perpe- 
trated by armed enemy units. 

9-6. Types of Sabotage 

Incidents of sabotage or suspected sabotage nor- 
mally are classified according to the means em- 
ployed. The traditional types of sabotage have 
been incendiary, explosive, and mechanical. In 
the future, it can be expected that chemical, bio- 
logical, and nuclear means of sabotage will pose 
an even greater threat to military operations. A 
detailed discussion of materials and devices em- 
ployed in these types of sabotage is included in 
FM 19-30. Special operations designed to counter 
the overall threat of sabotage to the military es- 
tablishment are covered in FM 30-17A. 



greater in importance when conducting counter- 
espionage operations is the need for an individual 
with training and/or experience in MOS 
9668/972A/97C. 



INVESTIGATIONS 

9-7. Investigative Procedure in Sabotage 
Investigations 

Immediate action is of paramount importance in 
conducting a sabotage investigation. The possibil- 
ity may exist that the saboteur is still near the 
scene, or that other military targets may require 
immediate additional security protection or pre- 
clude or limit further damage. Of vital signifi- 
cance is the preservation and analysis of the inci- 
dent scene before the evidence may be altered or 
destroyed. 

a. General Investigative Guidelines. The inves- 
tigation must proceed with objective, analytical, 
logical thoroughness. The standard investigative 
interrogatives should be applied, usually in the 
following sequence : 

(1) What. The Special Agent must deter- 
mine what military target was sabotaged and the 
degree of damage to the target. 

(2) When. The exact time when the act of 
sabotage was initiated and when it was discov- 
ered must be established and confirmed from as 
many sources as possible. 

(3) Where. The precise location of the target 
and its relation to surrounding activities must be 
determined. 

(4) How. The type of sabotage (incendiary, 
explosive, mechanical, chemical, biological, or nu- 
clear) must be established and the procedures 
and materials employed determined through in- 
vestigation and technical examination and analy- 
sis. 

(5) Why. All possible motives of the sabo- 
teur may be established through a process of 
elimination by investigation of suspects deter- 
mined to have had motive and opportunity to con- 
duct the sabotage act. 

b. Specific Investigation Actions. The following 
outline of possible investigative actions may be 
employed as a guide for investigation of most in- 
cidents in which sabotage is alleged or suspected : 

(1) Obtain and analyze the details surround- 
ing the reporting of the incident to the counterin- 
telligence unit. The identity of the person report- 
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ing the incident and his reasons for doing so must 
be established. The facts connected with the re- 
ported discovery of the sabotage must be deter- 
mined and examined for possible discrepancies. 

(2) Examine the incident scene as quickly as 
possible. The Special Agent should attempt to 
reach the scene before possible witnesses have 
dispersed and evidence has been disturbed. Upon 
arrival at the scene, he should employ the stan- 
dard crime-scene investigative procedures, to in- 
clude the following steps : 

(a) Protect the scene from mutilation by 
removing all unauthorized personnel from the 
area, roping off the area if necessary, and posting 
one or more guards to deny entrance and prevent 
anything from being removed. 

( b ) Locate all possible witnesses, record 
their names and addresses, and if feasible, hold 
them for questioning. Witnesses held should be 
segregated. 

(c) Preserve the incident scene by taking 
notes, causing detailed sketches to be made, and 
taking pictures. 

( d ) Obtain the assistance of technical ex- 
perts to search the scene of the sabotage act, col- 
lect and preserve physical evidence, and obtain 
all possible clues. Arson specialists, explosives ex- 
perts, or other types of technicians may be re- 
quired. 

(e) Take any steps necessary to prevent 



further damage to the target and to safeguard 
classified information or material. 

(3) Interview witnesses and attempt to ob- 
tain written statements before the witnesses have 
had a chance to forget details or compare stories. 

(4) Based on facts determined from incident 
scene examination and interview of witnesses, 
check all pertinent files. Files of particular im- 
portance may include unit modus operandi files, 
partisan, guerrilla, or insurgent activity files, 
local police files on arsonists, local police modus 
operandi files, and Provost Marshal files. File 
checks should include personality checks on wit- 
nesses and the person who discovered and re- 
ported the act of sabotage. 

(5) Interrogate suspects. All available infor- 
mation such as evidence, technical and laboratory 
reports, statements of witnesses, and information 
from informants should be compiled and studied 
in preparation for interrogation of suspects. In 
some instances, discreet surveillance may be em- 
ployed prior to detention and interrogation of 
suspects. 

c. Additional Aid. FM 19-20 contains investi- 
gative guidance particularly applicable to the in- 
vestigation of incendiary sabotage; is a valuable 
aid in the conduct of complaint investigations in 
which explosive sabotage is alleged or suspected; 
and provides excellent guidance for the protec- 
tion, search, and processing of the incident scene. 



Section III. ESPIONAGE INVESTIGATIONS 



9-8. General 

Unlike sabotage cases, most espionage investiga- 
tions will be personal subject rather than inci- 
dent type cases; that is, they will originate with 
allegations regarding the activities of known in- 
dividuals. There are instances, however, when 
counterintelligence investigations will be directed 
to conduct investigations of incidents in which es- 
pionage is suspected, but the identity of suspects 
has not been established (e.g., the theft of classi- 
fied documents or materiel). Leads in espionage 
investigations may originate from a wide variety 
of sources, prominent among which are the fol- 
lowing : 

a. Reports from confidential sources. 

b. Reports from other intelligence, security, 
and law enforcement agencies. 

c. Discovery of evidence of espionage during 



surveys, inspections, and technical surveys or 
inspections. 

d. Reports submitted by military units in ac- 
cordance with provisions of AR 381-12 regarding 
espionage directed against the US Army and US 
Army personnel. 

e. Discovery of evidence of espionage during 
screening of refugees, line crossers, displaced 
persons, prisoners of war, and similar groups. 

/. Information developed during the course of 
routine personnel security investigations. 

g. Information or evidence obtained through 
censorship operations. 

9-9. Federal Espionage Statutes 

The espionage statutes encompass many kinds of 
activities and have the ultimate goal to prevent 
defense information from falling into the hands 



9-3 




FM 30-17 



of a foreign nation. The salient aspects of the 
Federal Espionage Act, Title 18, United States 
Code, Sections 793-796, are summarized as fol- 
lows: 

Whoever for the purpose of obtaining informa- 
tion respecting the national defense — 

a. With the intent or reason to believe that the 
information is to be used to the injury of the 
United States or to the advantage of a foreign na- 
tion: 

(1) Goes into a place connected with the na- 
tional defense, for the purpose of obtaining de- 
fense information, or — 

(2) Copies anything connected with the na- 
tional defense, or — 

(3) With either lawful or unlawful posses- 
sion, delivers national defense information to one 
not entitled to receive it, or fails to deliver on de- 
mand to one entitled to receive it, or — 

(4) Receives or obtains any writing con- 
nected to the national defense with reason to be- 
lieve that it was obtained contrary to law, or — 

b. With intent to communicate to the enemy 
during time of war, collects, communicates, or at- 
tempts to elicit information pertaining to the 
public defense, or — 

c. With lawful possession, permits national de- 
fense information to be lost, stolen, or ab- 
stracted ; or having knowledge of such loss, theft, 
or abstraction fails to make a prompt report of 
the same will have committed espionage. 

9—10. Investigative Guidelines in Espionage 
Cases 

a. Analysis of the statute and of pertinent 
court decisions permit the following conclusions 
to be drawn with respect to proof of espionage. 

(1) “National defense information” is infor- 
mation of military significance which has not 
been published for public consumption; i.e., not 
distributed in public channels. It need not be clas- 
sified defense information as defined in AR 380-5. 
The critical points are that it relates to the na- 
tional defense and has been restricted to autho- 
rized channels. 

(2) “Any foreign nation” means the nation 
involved need not be a declared enemy, as in trea- 
son. 

(3) Loss through gross neglect requires no 
positive act because it is a crime of omission. 



Each facet, grossly negligent loss and failure to 
promptly report, is a separate and distinct crime. 

b. The espionage investigation must be directed 
toward the collection of information and evidence 
to show — 

(1) That national defense information was 
involved. 

(2) That there was an intent or reason to be- 
lieve that the United States would be injured, or 
that a foreign nation would benefit. 

(3) That one or more of the acts enumerated 
in the statute actually occurred. 

9—11. Spying, Article 106, Uniform Code 
of Military Justice 

a. Although the crime of spying as defined in 
Article 106, UCMJ, differs from espionage, com- 
plaint-type investigations based on Article 106 
will be categorized as espionage cases for report- 
ing and statistical purposes. 

b. Spying is strictly limited to a wartime mili- 
tary situation because of the requirements of in- 
ternational law, particularly the provision of the 
Geneva Conventions. There are four elements to 
the crime; all four must be present to constitute 
the crime of spying — 

(1) Breach of our lines and apprehension 
within US zone-of-operations. 

(2) Clandestine operations or false preten- 
ses. 

(3) Obtaining or seeking information to 
communicate to the enemy. 

(4) Specific intent to so communicate. 

9-12. Conduct of Espionage Investigations 

Because of the wide variety of circumstances 
under which espionage cases may originate, the 
many different elements that may constitute the 
crime of espionage, and the fact that it may not 
always be desirable to direct the course of the in- 
vestigation toward the arrest and prosecution of 
the offender, no single set of investigative proce- 
dures can be recommended as applicable to the 
conduct of espionage investigations. It is essential 
that Special Agents responsible for such an in- 
vestigation have a thorough and up-to-date 
knowledge of all espionage and counterespionage 
methods and procedures discussed in FM 30-17 A. 
Any or all of the investigative techniques de- 
scribed in this manual and FM 30-17A may be 
employed in espionage cases. Records examina- 
tions can be used to break the cover story of an 
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espionage suspect. Visual or technical surveil- 
lance can be used to obtain leads or evidence. 
Confidential sources or undercover operations can 
be used to locate and identify suspects. Investiga- 
tive photography can be used to provide evidence 
of an attempt to transmit national defense infor- 
mation to a foreign nation. The techniques em- 
ployed must be determined in each individual 
case through continuing study and analysis of all 
known information developed throughout the 
course of the investigation. The following quota- 
tion from testimony in February 1950 by Mr. J. 
Edgar Hoover, Director of the Federal Bureau of 



Investigation, explains why arrest and prosecu- 
tion are not always the objectives of espionage in- 
vestigations : 



In a criminal case the identification and arrest 
of the wrongdoer are the ultimate objectives. In 
an espionage case the identification of the wrong- 
doer is only the first step. What is more impor- 
tant is to ascertain his contacts, his objectives, 
his sources of information and his methods of 
communication. Arrest and public disclosure are 
steps to be taken only as a matter of last resort. 
It is better to know who these people are and 
what they are doing, and to immobilize their 
efforts, than it is to expose them publicly and 
then go through the tireless efforts of identifying 
their successors. 



Section IV. TREASON INVESTIGATIONS 



9—1 3. General 

a. The abuse of treason statutes in English 
legal history led the framers of the US Constitu- 
tion to include a limiting definition of treason in 
that document. The Constitution also imposes 
qualifications regarding the conviction of an indi- 
vidual for that crime — “no person shall be con- 
victed of treason unless on the testimony of two 
witnesses to the same overt act, or on confession 
in open court.” (Article 3, US Constitution.) 

b. Counterintelligence complaint-type investi- 
gations in which treason is alleged or suspected 
may occur during wartime, but are more apt to be 
directed immediately upon the conclusion of hos- 
tilities. Allegations of treason may originate with 
liberated prisoners of war, interned US civilians, 
examination of captured enemy records, or inter- 
rogation of enemy military and civilian person- 
nel. Treason cases will almost always be personal 
subject rather than incident cases. Unlike most 
other complaint type investigations, the investi- 
gation of a treason case will be primarily con- 
cerned with obtaining evidence of past rather 
than current activities of the suspected or ac- 
cused person. 

9—14. Elements of Treason Under Federal 
Statute 

a. Interpretation by the Federal courts in trea- 
son cases leads to the following generalities con- 
cerning the legal elements of the crime of treason 
under the Federal statute: 

(1) The accused must owe allegiance to the 
United States. A US citizen owes permanent alle- 
giance whether in the United States or on foreign 
soil (unless an effective renunciation of citizen- 
ship was made). An alien in the United States 



owes temporary allegiance to the US because he 
enjoys the protection of US laws. 

(2) A levy of war must be an actual waging 
of open hostilities against the Government with 
specific intent to cause its overthrow. 

(3) Adherence to the enemy means, in gen- 
eral, any act committed after a state of war ex- 
ists which indicates a want of loyalty to the Gov- 
ernment of the US, and sympathy with its ene- 
mies, and which, by fair construction is directly 
in furtherance of their hostile designs. 

(4) The levy of war and adherence to the 
enemy are alternative acts, either of which, when 
done by a person owing allegiance to the United 
States, constitutes treason. 

b. The investigative burden in treason cases is 
as follows : 

(1) Allegiance to the United States at the 
time of the act of treason must be shown. 

(2) A levy of war under the two following 
conditions must be shown : 

(a) Open hostilities against the US Gov- 
ernment must be shown. 

(6) Specific intent to overthrow the Gov- 
ernment of the United States must be established. 

(3) There must be an adherence to the 
enemy under these conditions : 

(a.) Tangible or intangible aid to an enemy 
must be shown. 

(b) The enemy must be in a state of open 
hostility with the US Government. 

(4) Two witnesses to the same overt act 
must testify or — 

(5) It must be established that the acccused 
intends to confess in open court. 
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9-15. Aiding the Enemy, Article 104, 
Uniform Code of Military Justice 

Investigations conducted by counterintelligence 
personnel to prove or disprove charges brought 
against an individual subject to the UCMJ under 
Article 104, Aiding the Enemy, may in some 
cases by categorized as treason cases (AR 
381-130). The article provides that “any person 
who (1) aids, or attempts to aid, the enemy with 
arms, ammunition, supplies, money, or other 
things or (2) without proper authority know- 
ingly harbors or protects or gives intelligence to, 
or communicates, or corresponds with or holds 
any intercourse with the enemy, either directly or 
indirectly, shall suffer death or such other pun- 
ishment as a court-martial or other military com- 
mission may direct.” 

a. Physical Acts Which Constitute Aiding the 
Enemy. From the wording of the article and 
from interpretation by the Court of Military Ap- 
peals, there are three physical acts which consti- 
tute the crime of aiding the enemy. Any one of 
these acts with general criminal intent is a viola- 
tion of the article — 

(1) Aiding the enemy with ammunition, 
arms, supplies, or other things. 

(2) Harboring or protecting the enemy with- 
out proper authority. 

(3) Giving intelligence to, communicating 
with corresponding with, or holding any inter- 
course with the enemy without proper authority. 

b. Proof Requirements Under Article 10U- 

(1) It is necessary to prove only that one or 
more of the prohibited acts actually occurred. 

(2) The enemy need not be a declared enemy 
but may be a “substantial” enemy as in the case 
of the Communist forces in the Korean War or in 
the Vietnam conflict. 

(3) The requirements of proving allegiance 



and proving the overt act by two witnesses which 
are essential under the Federal treason statute do 
not apply. 

c. Korean War Cases Under Article 10 h. Arti- 
cle 104 was used in the majority of the courts- 
martial cases arising from the Korean prisoner 
of war incidents. Most of the specifications in 
these cases concerned the third act listed above 
and specifically that part of the act making corre- 
spondence, without proper authority, a crime. 
The Court of Military Appeals established in 
these cases that there are only three types of 
communication with the enemy which may be 
made with “proper authority” under military 
law, regardless of the motives which prompt the 
communication : 

(1) A communication disclosing name, rank, 
SSN, and date of birth. 

(2) A communication concerning the necessi- 
ties of life. 

(3) A communication concerning regulations 
and orders of the place of confinement. 

9—16. Conduct of Treason Investigations 

Records examination, interview, and interroga- 
tion normally will be the principal investigative 
techniques employed in treason complaint cases. 
The Special Agent must give particular attention 
to the legal requirements governing the collection 
and preservation of evidence, especially the tak- 
ing of statements from witnesses and suspects. 
He must be careful to sort out fact from rumor or 
hearsay when taking testimony from witnesses 
and when reporting the results of investigations. 
In many cases, it will be necessary for the inves- 
tigator to consult regularly with legal authorities 
during the course of the investigation to insure 
that the elements of proof are being fulfilled and 
that all applicable legal conditions and restric- 
tions are met. 



Section V. SEDITION INVESTIGATIONS 



9—17. General 

Complaint-type investigations regarding alleged 
or suspected sedition may be based on either the 
Federal sedition statute (Sections 2384 and 2385, 
Title 18, United States Code) or the UCMJ (Ar- 
ticle 94, Mutiny and Sedition). Sedition cases 
may be either incident type, as in the case of the 
discovery of literature advocating the violent 
overthrow of the US Government, or personal 



subject type, as in the distribution of such litera- 
ture by known persons. Leads or allegations 
which prompt the opening of sedition investiga- 
tions by control offices may come from many 
sources, but they are most often based on infor- 
mation: submitted by confidential sources; con- 
tained in reports from other agencies; or devel- 
oped during the course of routine background in- 
vestigations. Complaint-type investigations in- 
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volving sedition may occur with equal frequency 
in either peacetime or periods of hostilities. 

9—1 8. Seditious Conspiracy 

Section 2384 of Title 18, US Code, makes it a spe- 
cific crime to conspire to overthrow the Govern- 
ment of the United States. Unlike the general 
conspiracy statute, which makes it a crime to 
conspire to commit any Federal crime, the sedi- 
tious conspiracy statute does not require the com- 
mission of an overt act toward fulfillment of the 
conspiracy’s objective. The crime of seditious con- 
spiracy is complete when two or more persons 
have entered into agreement to overthrow the 
Government, or to prevent, hinder, or delay the 
execution of any law of the United States. It 
should be noted that seditious conspiracy is a con- 
spiracy to actually overthrow, as distinct from a 
conspiracy to advocate overthrow. 

9—19. Advocacy of the Overthrow of the 
US Government 

Section 2385 of Title 18, US Code, also known as 
the Smith Act, enumerates four specific types of 
activity which, if done with intent to cause the 
overthrow of the Government by force or vio- 
lence, constitute sedition. The prohibited acts 
are : advocating or teaching the duty or necessity 
of such overthrow; or printing, publishing, sell- 
ing, or distributing written matter advocating or 
teaching the duty or necessity of such overthrow ; 
or organizing a society or group whose purpose is 
to advocate or teach the duty or necessity of such 
overthrow ; or being or becoming a member of, or 
affiliating with, such society or group knowing 
the purpose thereof. Court decisions relative to 
advocacy of overthrow have established that the 
advocacy must be calculated to incite persons to 
take action toward the violent overthrow of the 
Government. The mere advocacy or teaching of 
forcible overthrow of government as an abstract 
principle, divorced from any effort to instigate 
action to that end, does not constitute the crime 
of sedition under the Smith Act. The requirement 
for the advocacy to “incite persons to take ac- 
tion” is of particular significance to the Special 
Agent, and it can be expected that considerable 
effort in any case alleging violation of the Smith 



Act will necessarily be directed toward proving 
that the oral or written material involved in- 
tended to incite listeners or readers to take ac- 
tion. 

9—20. Mutiny and Sedition, Article 94, 
Uniform Code of Military Justice 

Counterintelligence personnel may be directed to 
investigate sedition or (less frequently) mutiny 
cases. Such complaint-type case may be either 
personal subject or incident type. 

a. Mutiny. Mutiny is defined as a collective ef- 
fort to overthrow lawful military authority. It 
also includes, under Article 94, the individual 
creation of a riot or disturbance with the intent 
to overthrow lawful military authority. The of- 
fenses may be committed in two ways : by several 
persons acting in concert to refuse to obey orders 
from proper authority, and with intent to over- 
ride military authority ; or by a person, with sim- 
ilar intent, acting either alone or in concert with 
others, creating a violence or disturbance. The in- 
vestigation of incidents of mutiny normally will 
not be assigned to counterintelligence personnel 
unless the mutiny is believed to be related to hos- 
tile intelligence or subversive activities. 

b. Sedition. Article 94 makes it a crime for any 
person, with intent, to cause the overthrow or de- 
struction of lawful civil authority, or to create in 
concert with any other person a revolt, violence, 
or other disturbance against such authority. The 
investigation of charges of sedition under Arti- 
cle 94 normally will be assigned to counterintel- 
ligence personnel. 

9—21. Conduct of Sedition Complaint 
Investigations 

Covert investigative techniques are likely to be 
applicable to the conduct of sedition investiga- 
tions. The standard techniques of interview and 
interrogation will also be important. A thorough 
knowledge of subversive activities, individuals, 
and organizations in the area usually will be an 
essential attribute for Special Agents conducting 
sedition complaint cases. FM 30-17A provides ad- 
ditional investigative techniques likely to be appl- 
icable to the conduct of sedition investigations. 



Section VI. SUBVERSIVE ACTIVITY AND DISAFFECTION INVESTIGATIONS 

9—22. General most areas-of-operation will be in either the sub- 

The majority of complaint-type investigations versive activity or disaffection categories. Most of 

conducted by counterintelligence personnel in these will be personal subject cases based on: ad- 
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verse loyalty information developed during rou- 
tine background investigations; reports submit- 
ted by military units under AR 381-12, reports 
from other intelligence and security agencies; 
and leads obtained directly from sources used in 
counterintelligence special operations (AR 
381-47 and FM 30-17A). Because neither subver- 
sive activity nor disaffection, as such, is defined 
as a specific crime in either the Federal criminal 
code or the UCMJ, the objective of such com- 
plaint-type investigations usually will be to deter- 
mine if there is a need for some administrative 
action; e.g., removal from the sensitive assign- 
ment to protect the security of the military com- 
mand. 

9-23. Subversive Activity 

AR 381-130 defines subversive activity as all will- 
ful acts which do not fit the categories of sabo- 
tage, espionage, treason, or sedition, but which 
are intended to lend aid, comfort, or moral sup- 
port to individuals, groups, or organizations ad- 
vocating the overthrow of the United States Gov- 
ernment by force or violence, or are otherwise in- 
tended to be detrimental to the national security 
of the United States. Since this area is very nebu- 
lous and there are no statutory standards which 
the actor’s conduct must meet, the investigation 
must: 



a. Determine what act occurred, 

b. Show, based on evidence of probative value, 
that the activity was detrimental to the national 
security, and 

c. Show that the activity did not rise to the 
level of treason, sedition, espionage, or sabotage. 

AR 604-10 and AR 690-1 include specific guid- 
ance regarding the conduct of complaint-type in- 
vestigation of alleged subversive activities on the 
part of uniformed or civilian personnel of the De- 
partment of the Army. 

9-24. Disaffection 

Disaffection, as defined in AR 381-130, is a state 
of mind and, although the disaffected person may 
have criminal intent, there is no conduct in- 
volved. Hence, disaffection is noncriminal in na- 
ture. However, a person within the military es- 
tablishment possessing such a state of mind 
creates a vulnerable spot in the national security 
and is most susceptible to approach by persons 
whose objectives are inimical to the United 
States. The Special Agent must show the requis- 
ite mental attitude for disaffection through such 
tangible indications as oral statements, written 
statements in personal correspondence, published 
statements, or published textual material. 



9-8 




FM 30-17 



CHAPTER 10 

COUNTERINTELLIGENCE SURVEYS AND INSPECTIONS 



Section I. COUNTERINTELLIGENCE SURVEYS 



10-1. General 

a. One of the functions of counterintelligence 
units is to assist commanders in establishing sys- 
tems, procedures, and safeguards designed to pro- 
tect military installations, personnel, and activi- 
ties from the threat of espionage, sabotage, and 
subversion. To determine the requirements for es- 
tablishing such systems, procedures, and safe- 
guards, it is necessary: to analyze all counterin- 
telligence factors influencing security at the com- 
mander’s installation; to ascertain the counterin- 
telligence measures required by the sensitivity or 
criticality of the installation; to determine the 
counterintelligence measures which now exist, 
and finally; to provide recommendations which 
will bring existing counterintelligence measures 
to the required standards. The accomplishment of 
these four requirements is the objective of the 
counterintelligence survey. 

b. The counterintelligence survey is a service to 
determine the security measures necessary to pro- 
tect military installations and offices against es- 
pionage, sabotage, and unauthorized disclosure 
of, or access to, classified defense information. 
While Army Regulations provide certain mini- 
mum requirements for security, and inspections 
are made to determine that these requirements 
are being met, the scope of the counterintel- 
ligence survey is much broader, as it must prov- 
ide recommendations designed to fit a specific in- 
stallation. Because the survey is to establish re- 
quirements rather than test compliance with es- 
tablished requirements, it is not a recurring ser- 
vice. As long as there is no major change in the 
physical characteristics of an installation or its 
mission, the counterintelligence survey once con- 
ducted will remain valid. 

c. Physical security is a responsibility of the 
Provost Marshal (AR 190-13). However, in ac- 
cordance with Department of the Army policy, 
personnel performing Cl services are responsible 
for assessing the Cl aspects of security plans and 



programs. Counterintelligence surveys are coor- 
dinated with the local provost marshal who, 
under the staff supervision of the Gl, develops 
and executes plans and procedures pertaining to 
crime prevention, maintenance of discipline, law, 
order, and physical security. 

d. Signal security is the responsibility of the US 
Army Security Agency (USASA). USASA ele- 
ments monitor and analyze Army telecommuni- 
cations and evaluate the status of communica- 
tions security (COMSEC) in support commands. 
Additionally, these elements assist in determining 
the electronic security (ELSEC) characteristics 
of Army equipment systems and recommend op- 
erating techniques and procedures for ELSEC 
purposes. See FM 32-5 for details on USASA as- 
sistance to Cl elements. 

10-2. Initiation of a Counterintelligence 
Survey 

The request for a Cl survey must orginate with 
the commander of the installation concerned or 
with a higher commander in the same chain of 
command. A Cl survey may be requested for the 
following reasons: 

а. Activation or reactivation of an installation 
or activity, or a major component thereof. 

б. Significant change in mission, function, per- 
sonnel strength or structure, or physical reorgan- 
ization. 

c. New, hazardous conditions within an instal- 
lation which necessitate the re-evaluation of the 
security system. 

d. Significant change in material produced, 
processed, stored, or handled. 

e. Change in the locale or environment in 
which the installation is located. 

/. Receipt of sufficient justification for reasons 
other than those stated above, such as no record 
of a previous survey having been conducted. 



10-1 




FM 30-17 



Section II. PREPARATION FOR COUNTERINTELLIGENCE SURVEYS 



10-3. Preparatory Procedures 

a. Selection of Personnel. The number of per- 
sonnel used to conduct the survey will vary ac- 
cording to the size and nature of the installation, 
the number of prsonnel available, and special op- 
erational or technical considerations. In some 
cases, the survey may be conducted by a single 
Special Agent ; more often it will be conducted by 
a team operating under the direct control of a 
designated Special Agent-in-Charge. Frequently, 
the team will include personnel who have been 
trained in defense against methods of entry 
(DAME), audio surveillance countermeasures 
(DASE), and investigative photography (Photo). 

b. Collection of Data. It is essential that the 
survey team be as well informed as possible rela- 
tive to the particular installation to be surveyed. 
Counterintelligence unit files, particularly rec- 
ords of prior surveys or inspections, will provide 
valuable background and reference data. Infor- 
mation regarding the area surrounding the in- 
stallation to be surveyed may be found in investi- 
gative or other intelligence reports in unit files of 
the military intelligence element, the Provost 
Marshal’s Office, and the local Criminal Investi- 
gation Command (CIDC) element. In particular, 
the CIDC Crime Prevention Surveys, both exter- 
nal and internal, will assist the survey team in 
the conduct of the survey. Other investigative or 
intelligence agencies in the area may also be able 
to assist, e.g., OSI and NIS. Additional informa- 
tion relative to the geography of the area can be 
obtained from road or military maps. Regulations 
and directives pertinent to the installation to be 
surveyed, if available, should also be collected 
and studied. 

c. Security Regulations. A complete set of se- 
curity regulations should be collected and tabbed 
for ready reference. Security regulations of ref- 
erence value during a Cl survey include, but are 
not limited to, the following: AR 340-series, AR 
380-5, AR 380-6, AR 380-20, AR 380-25, AR 
380-150, AR 381-12, AR 381-14, AR 381-130, 
AR 600-31, AR 604-5, and AR 604-10. FM 19-30 
will also be of reference value in preparation for 
and conduct of Cl surveys. 

d. Equipment. The survey teams should pro- 
cure tools and equipment which will be needed 
during the conduct of the survey. Such items may 
include tools (hammer, screwdriver, sidecut 
pliers, measuring tape, small crowbar, flash- 



light), photographic equipment, special technical 
devices, and appropriate office equipment for pre- 
paring records and reports. 

e. Coordination. A designated representative of 
the counterintelligence unit concerned normally 
will contact the commander of the 
installation/activity to be surveyed prior to the 
initiation of the survey for the purposes of : 

(1) Determining and coordinating the pro- 
posed scope of the survey. 

(2) Arranging for access to necessary rec- 
ords, buildings, and areas. 

(3) Procuring applicable installations/activ- 
ity security directives. 

(4) Arranging for an initial briefing prior to 
the actual conduct of the survey, at which time 
the Special Agent-in-Charge of the team will thor- 
oughly brief key installation personnel on what is 
to be accomplished and answer any questions con- 
cerning the survey that they may have. 

10—4. Preparation of Checklists 

a. Study and analysis of data collected regard- 
ing the installation to be surveyed may indicate 
the necessity or desirability of preparing a 
checklist to serve as a guide for personnel con- 
ducting the survey. A checklist is a list of general 
or specific points that must be covered during the 
survey. It serves as a reminder to surveying per- 
sonnel to insure that the scope of the survey is 
met. A checklist may be either general or specific. 

(1) General checklist. A general checklist 
provides reminders of the security considerations 
which are usually inherent to all installations; 
e.g., documents and information security, person- 
nel security, and physical measures. Within these 
three major divisions, there will be many subdivi- 
sions. 

(а) Documents and information security 
considerations may include storage facilities, 
marking and handling of classified documents, 
application of “need-to-know,” duties of security 
control personnel, maintenance of classified docu- 
ment log, and destruction procedures. 

(б) Personnel security requires atten- 
tion be given to clearance procedures, security ed- 
ucation program, and similar matters. 

(c) Physical measures include perimeter 
fencing, perimeter lighting, guard systems, pass 
and badge systems, restricted areas, and building 
security. In this connection, particular attention 
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is invited to the physical security checklist con- 
tained in FM 19-30. (Physical measures should 
be included in the physical security conducted by 
military police units under the control of the pro- 
vost marshal.) 

(2) Specific checklist. A specific checklist is 
one that applies to a particular installation or a 
unique type of installation. An expample would 
be a checklist prepared for use at US Army Air 
Defense Command installations. In many res- 
pects, all of these installations are alike. Usually, 
these sites occupy the same amount of real estate, 
operate at the same echelon of command, have 
the same equipment, the same number and type 
of troops, and, in most cases, operate under the 
same policy from an operational and security 
point of view. When there is a requirement to 
surevy a number of these installations, it would 
be worthwhile to prepare a specific checklist 
which would apply to these sites. Specific check- 
lists normally include more detail than general 
checklists. 

b. A checklist, either general or specific, is used 
only as a guide. It is improper to assume that any 
checklist will provide a complete basis for action 
in completing the survey. Each installation has 
its own particular security problems. These dif- 
ferences may have their origin in size, location, 
mission, or surrounding area of the installation. 



Each checklist must be modified by additions, 
changes, or deletions before it can be applied to 
any one installation. Even then, the application 
of good investigative techniques can be expected 
to extend the survey beyond the detail contained 
in the checklist. See appendix D for a checklist 
which may be used as a guide for conducting a Cl 
survey. 

10—5. The Escort Officer 

a. From the standpoint of both the Special 
Agent team and the installation, it is desirable 
that an escort be provided by the installation to 
accompany the survey personnel during the con- 
duct of the survey. Preferably, this escort should 
be a representative of the installation’s intellig- 
ence or security office. In any event, he should be 
a person conversant with all security practices 
and procedures in effect at the installation. 

b. The escort officer serves as a guide to the 
Special Agent or survey team as they proceed 
through the installation conducting the survey. He 
identifies the surveying personnel to those per- 
sons who will give information and makes ar- 
rangements to satisfy their operational require- 
ments. The escort officer is present to gain timely 
notice of any outstanding hazards discovered, 
provide information pertaining to previous at- 
tempts to correct such hazards, and make such 
on-the-spot corrections as possible. 



Section III. CONDUCT OF COUNTERINTELLIGENCE SURVEYS 



10-6. Preliminary Exterior and Interior 
Checks 

As soon after the initial briefing as possible, the 
survey team should conduct a tour of the area 
surrounding the installation. The purpose of such 
an inspection is to gain a general knowledge of 
those elements outside the installation which do 
or could conceivably have a direct or indirect in- 
fluence upon the security of the installation ei- 
ther in peacetime, under actual war conditions, or 
in case of riot, strikes, or other domestic disor- 
ders. It is in these areas adjacent to the installa- 
tion that many of the installation personnel 
gather for relaxation or entertainment, often 
under circumstances conducive to “loose talk.” 
The survey team should also check geographical 
features: terrain, road and railroad networks, 
bridges, and natural or manmade hazards near 
the installation. They should also determine, to 
the greatest extent possible, what influence the 



population has or could have upon the security of 
the installation. The CIDC Crime Prevention Sur- 
vey (External) may assist greatly in this area. 
The team should also tour the interior of the in- 
stallation to determine those areas, buildings, or 
offices which will require additional security con- 
siderations or which are considered to be sensi- 
tive. After the inspection, it may be necessary to 
confirm the findings by arranging for an inter- 
view with staff officers of the installation to learn 
the operational importance of particular areas of 
buildings. 

10-7. History of the Organization and 
Installation 

When survey personnel have completed a check 
of the surrounding area of the installation and a 
preliminary survey of the interior of the installa- 
tion, they should be ready to commence the actual 
survey. The team should first determine the his- 
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tory of the organization to be surveyed and of the 
installation on which it is located. In most cases, 
the history, background information, or both are 
readily available in printed form. From a secur- 
ity point of view, the survey personnel are inter- 
ested in the history of the organization and in- 
stallation from its inception. There frequently is 
information in the history of the organization or 
installation which directly affects the current se- 
curity situation (abandoned tunnels or sewer 
lines). 

10-8. Establishment of the Installation's 
Sensitivity 

At this point, the security needs of the installa- 
tion in relation to its sensitivity and importance 
must be determined. During the preliminary sur- 
vey the survey team has had an opportunity to 
make a rough evaluation of the installation’s im- 
portance to national defense and its vulnerability 
or value as an espionage or sabotage target. An 
accurate appraisal must be made prior to the in- 
vestigation in order that specific recommenda- 
tions commensurate with the actual security 
needs of the installation can be presented to the 
commander and his staff. The following points 
should be considered in determining sensitivity: 

a. Mission. The first consideration is the mis- 
sion of the organization being surveyed. It must 
be determined if the mission is continuous or of 
short duration, unclassified or classified, and if 
technical or highly skilled personnel are neces- 
sary for its successful operation. 

b. Cost of Replacement. In estimating the cost 
of replacement of the installation, a comparative 
analysis, not a dollar and cents figure, is ob- 
tained. The time necessary to replace personnel, 
documents, and materiel in the event the installa- 
tion were neutralized or destroyed is estimated. 
Further consideration is given to potential 
sources of personnel of similar experience and 
knowledge and to a source of copies of essential 
and critical documents which would be required 
in replacing or reactivating the installation. The 
financial cost of replacing the installation may 
then be considered. 

c. Location. Consideration must be given to the 
location of the installation and the effect the ele- 
ments surrounding it have upon its security. Most 
of the information concerning this aspect is de- 
termined from file checks and examination of the 
surrounding area before actually commencing the 
investigation. The area may be highly industrial, 



congested residential, urban in nature, or 
sparsely populated. The type of surrounding area 
may offer favorable natural cover to enemy es- 
pionage or sabotage agents. Consideration should 
also be given to the area’s transportation facili- 
ties and to natural hazards which may arise from 
the surrounding area such as flood, forest fires, or 
adjacent flammable storage areas. 

d. Security Classification of Information. One 
of the major points for consideration in evaluat- 
ing the sensitivity of an installation is the classifi- 
cation of the information stored, used, and 
created there. Logically, information which is of 
greater importance to national defense required 
greater safeguarding from all standpoints. While 
Army Regulations establish some safeguarding 
requirements, comparable measures will very 
likely be required in areas of consideration not 
specifically established by regulations. When con- 
sidering the classification of information, the 
amount of classified information present must be 
determined. 

e. Number of Like Installations. In determin- 
ing the overall importance of an installation, con- 
sideration must be given to installations or activi- 
ties which are capable of absorbing the functions 
of the surveyed installation in order to maintain 
mission continuity, in the event the surveyed in- 
stallation were neutralized or destroyed. If no 
other organization is capable of assuming these 
duties, the importance of the surveyed installa- 
tion would be increased immeasurably. However, 
the mere fact that similar installations or activi- 
ties exist may not significantly lower the critical 
rating. Similar installations may be in no position 
to absorb the mission of another, or, if the mis- 
sion is primarily devoted to a defined geographi- 
cal area, there may be no substitution regardless 
of how many similar installations exist. In con- 
sidering the substitution or replacement of an in- 
stallation or its mission, due consideration must 
be given to the time factor. What will be the time 
consumed before the changeover or substitution is 
effected? Are the facilities of the alternate in- 
stallation of such a nature as to achieve an oper- 
ating efficiency comparable to the previous level? 
If the alternate installation cannot operate at an 
acceptable level of efficiency, how long would it 
take to attain this desired level. Will this transi- 
tion period affect the national defense effort to a 
great degree? All of these questions must be con- 
sidered concerning the number and adaptability 
of like installations. 
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f. Importance to the Defense Effort. In some 
instances, evaluation of the installations impor- 
tance may be made locally based upon a joint ef- 
fort between the Cl survey team, the installation 
commander, and his staff. Other knowledgeable 
persons within the installation and command and 
an evaluation and correlation of available infor- 
mation from other agencies, adjacent commands, 
and the agency utilizing the end product are also 
of prime importance. In most instances this eval- 
uation has been made at higher echelons of com- 
mand or at Department of the Army level. The 
basic consideration is how important is this in- 
stallation and its mission, functions, and produc- 
tion to the national defense effort. The mission of 
the installation affords a fairly good indication of 
its importance. However, when the mission is 
compared with the cost of replacement, location 
of the installation, existence of like installations 
which could absorb the operations, and classifica- 
tion of the installation’s activities and informa- 
tion, the overall importance of the surveyed in- 
stallation may be higher or lower than antici- 
pated. This is the information the survey team 
requires before it can determine the actual secur- 
ity needs of the particular installation. When this 
sensitivity rating is compared with the installa- 
tion’s current security situation, the investigator 
will be in a position to offer recommendations to 
either raise or lower the level of security on the 
installation in consonance with its sensitivity or 
importance to the national defense effort. 

10—9. Determination of Existing Security 
Measures 

a. The foundation having been laid, the survey 
personnel can devote themselves to examination 
of the existing security situation at the installa- 
tion. This portion of the survey is a minute exam- 
ination of all factors pertaining to personnel se- 
curity, physical measures, and document and in- 
formation security. It is a collection of factual 
data that will, when reported, show what exists 
at this installation that affects security, without 
regard for its being labeled as a hazard or a pre- 
caution. Much of the security situation will not 
be based upon existing written requirements. 
Therefore, much of what is examined will not 
have been officially determined to be hazardous or 
precautionary in nature. The survey team must 
arrive at its own conclusions that these factors 
will be reflected in its recommendations. 

b. The techniques of conducting this portion of 
the survey are dependent upon the number of 



survey personnel available, personnel capability, 
and choice. Since three types of security are in- 
volved (document and information, personnel, 
and physical) and will be reported in separate 
portions of the survey report, it may be easier but 
more time-consuming to attack each of the types 
as a separate problem (i.e., gather all the infor- 
mation pertaining to physical measures first and 
then return over the same ground gathering in- 
formation pertaining to personnel security). If 
more than one Special Agent is available, it is 
better for a two-man team to investigate jointly 
than to use individuals in separate areas. If sub- 
teams of two or more investigators are assigned 
to separate portions of the survey to 'facilitate its 
accomplishment, extensive coordination is re- 
quired during the information-gathering portion 
and the evaluation portion because of the interac- 
tion between the types of security or areas being 
considered. 

10—10. Document and Information Security 

The document and information security phase is 
probably the most important part of the Cl sur- 
vey. Accordingly, this portion of the survey must 
be minutely detailed. In addition to using a 
checklist, survey personnel must examine, ana- 
lyze, check and cross-check always seeking to cor- 
rect weaknesses and discrepancies. Each survey 
team member must visualize the security proce- 
dures employed from a viewpoint of an enemy 
agent. Many aspects of document and information 
security appear to be mechanical in nature, but 
these appearances are misleading. Security, in all 
its phases, must be an alert, live process in order 
to constitute an effective defense against enemy 
agents attempting to penetrate or destroy the in- 
stallation. With these ideas in mind, the survey 
team can effectively inspect the procedures used, 
evaluate the security situation, and recommend to 
the commander corrective measures necessary to 
eliminate weaknesses and gaps in existing proce- 
dures. Conduct of the survey of document and in- 
formation security will include consideration of 
the following specific areas : 

a. Organizational Structure. The survey team 
must first have a clear understanding of the or- 
ganizational structure of the installation or unit 
being surveyed in order to check the security and 
flow of classified information. This can best be 
determined by interviewing individuals who 
likely have a thorough knowledge of the struc- 
ture and operational relationship between the in- 
stallation and the units stationed thereon. Organ- 
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izational charts obtained from the facility and 
units to be surveyed are also of great assistance 
in this respect. 

6. Flow of Classified Documents. The inflow of 
classified information generally commences at the 
higher headquarters and continues down through 
intermediate offices to lower units. The outflow of 
classified information usually follows the reverse 
pattern. The suggested approach is to examine all 
applicable items at each message center or classi- 
fied document control or storage point before pro- 
ceeding on to the next point to be checked. 

c. Document Records. Classified document reg- 
isters, receipts, retirement records, and destruc- 
tion certificates are accounting records. They are 
part of a protective system designed to overcome 
human error by assisting individuals to systemat- 
ically handle classified information in a secure 
manner. Accountability records are also detective 
in nature, for discrepancies may indicate loss, 
theft, or possible compromise of the information. 
Such records may also indicate by their accuracy 
and completeness, the attitude of the individuals 
administering the records toward security. 

10-11. Personnel Security 

Personnel security, from the viewpoint of the 
conduct of a Cl survey, may be divided into two 
separate categories, security clearances and se- 
curity education. The security clearance program 
is discussed below; security education is covered 
separately in paragraphs 10-19 through 10-22. 

a. Security Clerance Program. The personnel 
clearance procedures for an installation or unit 
must be carefully audited. AR 380-5 established 
that the basic requirement for dissemination of 
classified information is a “proper clearance” and 
a “need-to-know.” A proper clearance is obtaina- 
ble only upon initiation of appropriate adminis- 
trative action by the command in accordance with 
AR 604-5. The system for initiating a request to 
a higher headquarters, to include all administra- 
tive measures and forms, should be carefully re- 
viewed. Internal methods for supervision of prep- 
aration of requests, suspense files, tracers, and 
verifications of clearance status of incoming per- 
sonnel should be clearly outlined in the installa- 
tion or unit SOP. In those cases where the activi- 
ties of a unit with a tactical capability are being 
surveyed, careful attention must be given to the 
security portion of the tactical SOP. A personnel 
security program under tactical conditions must 
be designed to insure maximum protection for 



classified information while insuring flexibility of 
command that is vital to successful combat opera- 
tions. 

b. Records on Security Clearances. The clear- 
ance level required by each TOE or TD position 
must be determined; this information should ap- 
pear on a roster or manning table used by all 
staff sections for planning purposes. A compari- 
son of the actual clearance level of personnel as- 
signed and the clearance required by the position 
occupied will indicate the effectiveness of the pro- 
gram being surveyed. Each unit or installation 
should maintain a file on each individual assigned 
to the command to include forms executed and 
correspondence received or forwarded in connec- 
tion with the personnel security clearance pro- 
gram (AR 340-18-series). A reference card file 
indicating the full name, date and place of birth, 
social security number, and duty assignment of 
all personnel possessing a security clearance 
should be maintained in the intelligence office. 
The system employed to insure the accurate and 
up-to-date status of the card file should be 
checked by the survey team. 

(1) The distinction between the clearance 
level of an individual and the level of access to 
classified information authorized should be made 
clear. Surveying personnel should emphasize that 
a person may possess a Top Secret clearance, but 
in applying the “need-to-know” principle, a com- 
mander may limit access to that level of classified 
information consistent with the duty assignment 
of the individual. 

(2) General efficiency of the personnel se- 
curity program in the overall operation of the 
command is often indicated in the personnel as- 
signment section. Each set of orders prepared on 
an individual should, whenever necessary, indi- 
cate the clearance status of the person concerned. 
A duplicate of the card file system in the intellig- 
ence office may be maintained in the personnel as- 
signment section. If so, the administrative proce- 
dures practiced to insure that the duplicate set is 
always current should be examined by surveying 
personnel. 

(3) Military personnel who have been 
cleared should have a valid DA Form 873 (Cer- 
tificate of Clearance and/or Security Determina- 
tion under EO 10450) in their 201 files. The 
clearance certificate of a civilian employee is filed 
in his official personnel folder. A signed copy of 
DD Form 98, (Armed Forces Security Question- 
naire) for military personnel and DA Form 1111, 
(Statement of Nonaffiliation with Certain Organ- 
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izations) for civilian personnel must be a part of 
the permanent records of all military and civilian 
personnel of the Department of the Army. The 
DA Form 66 (Officer Qualification Record) and 
the DA Form 2Q (Enlisted Qualification Record) 
must indicate the date of completion of the inves- 
tigations, type investigation and level of security 
clearance granted. 

10—12. Physical Security 

a. Physical security is understood to be a dis- 
tinct type of security differentiated from docu- 
ment and information security and personnel se- 
curity in that it comprises a system of controls, 
barriers, and other devices and procedures to 
prevent destruction, damage, and unauthorized 
access to Army facilities/activities. Counterintel- 
ligence surveys, conducted to assess the counter- 
intelligence effectiveness of physical security 
plans and procedures, is not understood to include 
primary staff interest of the provost marshal in 
physical security surveys as described and defined 
in FM 19-20 and FM 19-30. 

b. In the event the installation/activity being 
surveyed already has on record a physical secur- 
ity survey performed by military police person- 
nel, a statement referring to the report is deemed 
sufficient, providing those deficiencies noted 
which directly affect the security of classified 
documents and material have been corrected. If 
this has not been accomplished, appropriate rec- 
ommendations will be made in the written report. 

c. If there is no record of a previously con- 
ducted physical security survey, coordination 
with the local provost marshal will be conducted 
in order to coordinate and schedule a physical se- 
curity survey to be accomplished in conjunction 
with the Cl survey. Counterintelligence personnel 
must, nevertheless, be familiar with, and pre- 
pared to examine and assess the counterintel- 
ligence effectiveness of, barriers, controls, and 
other protective devices, as well as the physical 
security plans and procedures of the installation 
concerned. When the facility being surveyed is of 
the “open post” type with few physical restric- 



tions which relate directly to counterintelligence 
security requirements, emphasis will be placed on 
examination of physical security factors which 
directly affect classified storage areas, restricted 
areas, or sensitive locations. When the entire in- 
stallation’s physical security system is essential 
to the protection of classified documents or mate- 
rial, the survey must be expanded to include these 
additional physical security safeguards. 

d. Counterintelligence surveys and inspections 
by Cl units, and SIGSEC surveys conducted by 
USASA units complement each other. Coordina- 
tion through G2/S2 channels of these efforts 
serve to maximize the overall security posture of 
the installation. 

10-13. The Exit Briefing 

After the survey team has completed its investi- 
gation and has arranged the results of its work 
in draft form prior to departing the installation, 
it should determine if the commander and his 
staff desire a final conference or exit briefing. The 
Special Agent-in-Charge should discuss with the 
commander and any other individuals designated 
by the commander the findings and tentative rec- 
ommendations. The recommendations are based 
on facts developed during the survey and cover 
the safeguards which should be established to ad- 
equately protect the installation against espion- 
age, sabotage, and subversion. The recommenda- 
tions should be tempered with reason, taking into 
consideration cost, time, manpower, availability 
of materials, etc. For each item which the survey 
team establishes as a hazard, there must be a rea- 
sonable, practical recommendation. A successful 
final critique with the commander and his staff 
can, in most cases, insure that the survey team’s 
recommendations are realistic and can be imple- 
mented with minimum difficulty. The team is not 
limited to the number of recommendations which 
can be made to eliminate any one hazard. Pri- 
mary and alternative recommendations can be 
made to insure correction of the hazard by the al- 
ternative means if the primary recommendation 
cannot be implemented. 



Section IV. COUNTERINTELLIGENCE INSPECTIONS 



10-14. General 

A Cl inspection is a service performed to deter- 
mine compliance with established security pol- 
icies and procedures. In addition to the formal 
inspections discussed in this section, counterintel- 



ligence elements should maintain regular contact 
with all US Army units in their area in order to 
provide continuous informal assistance, support, 
and advice to commanders at all echelons regard- 
ing security. 
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a. The inspection, although akin to the survey, 
is much more restricted in scope, because the sur- 
vey considers everything pertaining to security at 
an installation, while the inspection is limited to 
an assessment of the degree of compliance with 
established policies and procedures. 

b. The preliminary and investigative proce- 
dures involved in the conduct of a Cl inspection 
are essentially the same as those required for a 
survey. The selection of investigative personnel, 
necessary file checks and other preparation, du- 
ties of the Special Agent-in-Charge, use of 
checklists, coordination with the commander and 
escort officer, and actual inspection will very 
closely parallel the procedures used in the con- 
duct of a Cl survey. The usual differences be- 
tween the procedures followed are a matter of de- 
gree. There may or may not be prior personal 
contact between the installation to be inspected 
and the counterintelligence unit. Often, the initial 
contact is made by a letter of notification origin- 
ated by the headquarters to which the surveying 
unit is attached. The file checks need not be as ex- 
tensive as those required for a survey because the 
field-of-interest is limited to an appraisal of the 
degree of compliance with established security 
policies and procedures. Normally, the conduct of 
the inspection will not include the history, mis- 
sion, or establishment of installation sensitivity. 

10—15. Scope 

The scope of the Cl inspection will include checks 
to determine the degree of compliance by person- 
nel of the installation or activity with established 
security policies and procedures. Areas covered 
will include : whether assigned personnel with ac- 
cess to classified information and material are 
properly cleared ; whether they are properly safe- 
guarding classified information and material ; fa- 
cilities used for storing classified information and 
material to determine their adequacy ; procedures 
which are practices in controlling entrances and 
exits; guard system; and guard personnel with 
reference to their instructions concerning secur- 
ity. Special emphasis will be placed upon findings 
noted during previous surveys or inspections to 
determine if corrective actions have been taken. 

10—16. Types of Counterintelligence 
Inspections 

Inspections fall into three categories — an- 
nounced, unannounced, and penetration-type 
inspections. 



a. Announced Inspections. An announced 
inspection is one which has been publicized to the 
installation to be inspected so that all concerned 
personnel should be aware of its imminence and, 
consequently, may make such preparations as are 
necessary. This type of inspection is conducted on 
a recurring basis so that the installation, by mak- 
ing periodic preparations for forthcoming inspec- 
tions, brings its security application to a high 
level and maintains a responsible level of security 
between the inspections. Announced inspections 
are often conducted in conjunction with annual 
inspections conducted by the Inspector General. 
Assistance may range from providing the installa- 
tion with checklists which will be used in con- 
ducting the inspection to conferences with the in- 
stallation’s security personnel. 

b. Unannounced Inspections. An unannounced 
inspection is known in advance to certain selected 
personnel only. This type of inspection is de- 
signed to determine the installation’s compliance 
with existing requirements at times when special 
preparations have not been made. Personnel con- 
ducting an unannounced inspection must have 
with them, in addition to their credentials, au- 
thorization to accomplish the inspection. It is also 
necessary that they be accompanied by a respon- 
sible person of the command being inspected. 

c. Penetration Inspections. A penetration 
inspection is conducted in such a way that instal- 
lation personnel, other than the commander and 
those persons he feels it is desirable to notify, are 
unaware that such action is taking place. This 
type of inspection may be all-inclusive or may be 
limited to an attempt by counterintelligence per- 
sonnel to fraudulently gain access to some sensi- 
tive area within an installation for the purpose of 
performing simulated espionage or sabotage acts. 
The simulated activities should correspond to ac- 
tivities which actually might be attempted by a 
foreign power or hostile agent, and be realistic. 
Penetration inspections should be planned and 
executed in a manner that will not impair or dis- 
rupt the activities of the inspected unit or instal- 
lation unless this is within the context of the re- 
quest and has been approved by higher headquar- 
ters. 
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10-17. General 

a. The results of Cl surveys and inspections 
will be recorded and forwarded by letter of trans- 
mittal to the requester. Normally, reports of Cl 
services will contain five sections: 

(1) I. Introduction 

(2) II. Scope 

(3) III. Findings and Recommendations 

(4) IV. Comments 

(5) V. Exit Briefing 

b. Subparagraphs will be used within each sec- 
tion, as appropriate, and numbered consecutively 
throughout the report. Sketches, photographs, 
documents, or other pertinent material will be in- 
cluded when appropriate for clarity and under- 
standing. Inclosures will be referred to and pre- 
pared as exhibits. Reports will be classified, 
marked FOR OFFICIAL USE ONLY, or unclas- 
sified according to content. Reclassification in- 
structions or dates for removal of protective 
markings will be in accordance with AR 340-11, 
AR 380-6, and AR 381-45. 

10-18. Preparation 

Appendix C contains an example of a report of 
Counterintelligence Survey which should be used 
as a guide. The following provide additional guid- 
ance to assist the Special Agent in those items of 
interest to be included in Counterintelligence 
Survey and Inspection reports : 

a. Section III. Findings and Recommendations. 

(1) Findings. All violations, discrepancies, 
or deficiencies will be listed as findings, and all 
entries, will be sufficiently descriptive to convey a 
complete understanding to the serviced command. 



Each finding will be followed by an appropriate 
recommendation (see example in app C). Find- 
ings of a serious nature should be immediately 
brought to the attention of the appropriate 
official. Minor findings which are actually cor- 
rected in the presence of the inspection team or 
prior to their departure will be recorded with a 
statement to the effect that immediate corrective 
action was taken and therefore no recommenda- 
tion is made. 

(2) Recommendations. Recommendations 
should be concise, to the point, factual, and real- 
istic. In many instances, a specific recommenda- 
tion may require more than a partial quotation 
from published directives or regulations to ade- 
quately assist the command. Each recommenda- 
tion should be phrased to eliminate both the basic 
problem and the underlying cause and should be 
followed by a specific paragraph reference to an 
applicable regulation or directive. 

b. Section IV. Comments. Those existing condi- 
tions and procedures, which, although not in vio- 
lation of or at variance with published regula- 
tions or directives, may possibly have an adverse 
effect on overall security, will be recorded as 
weaknesses. Any other matter of pertinency not 
recorded elsewhere in the report may be included. 
If there are no pertinent remarks or weaknesses 
noted, this should be indicated. 

c. Section V. Exit Briefing. All findings and 
recommendations should be discussed with the 
key personnel of the serviced unit. Complimen- 
tary comments or discussion of substandard as- 
pects of the security program should also be pre- 
sented. The briefing will be made a matter of re- 
cord in the closing paragraph of the report; the 
report will include the names and titles of all in- 
dividuals present. 



Section VI. SECURITY EDUCATION 



10-19. General 

a. Either in conjunction with the conduct of Cl 
surveys and inspections or in the capacity of 
technical advisors on military security, counterin- 
telligence personnel may assist commanders in 
planning and implementing security education 
programs. The assistance rendered may be advis- 
ory in nature or be an actual presentation of a 



portion of the education and indoctrination pro- 
gram. Assistance by counterintelligence person- 
nel may be particularly helpful in conducting se- 
curity orientations in accordance with AR 
381-12, and AR 381-14. 

b. Protection of classified information is the ob- 
jective of security education, with an interme- 
diate goal of security awareness on the part of all 
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personnel. The security indoctrination of an indi- 
vidual can be successful only when he consciously 
accepts security as his personal responsibility. 
Security consciousness is a state of mind imply- 
ing an understanding of security objectives, prin- 
ciples and measures, and denoting a willingness 
and desire on the part of the individual to reach 
these objectives. 

10-20. Planning a Security Education Program 

In planning a security education program for a 
command, many factors must be taken into con- 
sideration for the program to be successful. The 
security requirements of commands will vary, as 
will the role of the counterintelligence unit in as- 
sisting the command in establishing a security 
education program. If the unit has been requested 
to suggest a security education program for a 
particular command, a preliminary appraisal is 
mandatory. Scheduled meetings with the com- 
mander, his staff, and key personnel will aid the 
unit in planning an effective program. Planning 
considerations include the following: 

a. Mission. The mission of the command will 
usually indicate potential targets for hostile acts 
of sabotage, espionage, or subversion. The mis- 
sion should be studied carefully to insure that the 
recommendations for a security education pro- 
gram are realistic, pertinent, and in harmony with 
the mission. 

b. Standing Operating Procedures. All SOPs, 
including personnel security, document and infor- 
mation security, and physical security, must be 
examined to ascertain what security measures are 
in effect. After the review of these procedures, in- 
terviews with members of the command should 
provide a reliable means of assessing the degree 
of compliance with these established procedures. 
The interviewees should remain anonymous in 
order to encourage full participation. Personnel 
should be observed performing their duties to de- 
termine whether they are complying with the es- 
tablished security procedures. 

c. File Checks. A perusal of the counterintel- 
ligence unit’s files as well as those of allied fed- 
eral or civil investigative agencies must be made 
to determine if any special security factors or 
hazards are to be considered. 

d. Status of Security Training. During the pre- 
liminary appraisal, the status of the command’s 
security training must be established. Not all per- 
sonnel will have received the same amount or 
type of security training. Since their require- 
ments vary, it will be necessary, for training pur- 



poses, to divide personnel into various groups: 
clerks and stenographers, custodial personnel, 
staff members, security forces, and operational 
groups. In establishing the status of security 
training within a command, the general attitude 
of all personnel toward this training and security 
in general should also be established. Care must 
be taken to insure that the attitude of the com- 
mand toward security is not the opinion of key 
personnel alone. A cross-sectional survey of the 
entire command must be obtained in order to rec- 
ommend an effective program. 

e. Survey of Surrounding Areas. A survey of 
the area surrounding the command should be 
made to establish the location and type of recrea- 
tional facilities frequented by members of the 
command during off-duty hours. 

10-21. Phases of a Security Education 
Program 

A security education program should be cycled 
and suited to the requirements of a particular 
group. The number of phases required is depen- 
dent upon the number of people concerned, status 
of training, amount of time available, physical 
facilities available, and funds allocated the com- 
mand for security purposes. Whenever practica- 
ble, elements of this program, particularly the 
initial interview and debriefing (a and g below), 
will be incorporated in unit SOP. In addition to 
the time spent in the actual education of person- 
nel, a complete and balanced security education 
program must also include indirect methods of 
approach which will require additional utiliza- 
tion of supervisory and security personnel. 

a. Initial Interview. The first phase of a com- 
plete and appropriately cycled security education 
program is the initial interview. The initial inter- 
view is usually the first contact that new mem- 
bers of the command will have with security, and 
it is imperative that the approach to this inter- 
view be conducted in a serious an professional 
manner. The interview may be supplemented by 
issuance of security regulations and written 
directives. The initial interview is designed to ac- 
complish four purposes: 

(1) Impress the individual with the signifi- 
cance and value of the information with which he 
will be entrusted. 

(2) Stress the importance of security to the 
command, the US Army, and to the individual 
himself. 
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(3) Explain to the individual the penalties 
involved if he carelessly or negligently mishan- 
dles the information with which he has been en- 
trusted. 

(4) Insure that the individual fully under- 
stands that once he has had access to, and knowl- 
edge of, classified information, he assumes, at the 
time of receipt of this information, the responsi- 
bility for its safeguarding. 

b. Training Conference. The second phase of a 
security education program is the training com- 
ference or conferences. The length of time in- 
volved depends on the complexity of security re- 
quirements pertaining to the individual’s particu- 
lar duties. The training conference should be held 
during the normal training or orientation period 
for new members of the command. It should be 
an integral part of training to emphasize that se- 
curity is one of the important requirements and 
conditions of employment. Individuals should be 
grouped together according to their positions 
within the command and each group should be 
treated accordingly. During these conferences, it 
may be appropriate to distribute various regula- 
tions, such as a security guide, or extracts from 
the command’s security SOP. 

c. Refresher Conference. The third phase is the 
refresher conference or conferences. These 
should last at least 30 minutes and should occur 
every 6 months or, as a minimum, yearly. The re- 
fresher conference should be designed to satisfy 
three requirements: 

(1) Remind the individuals of their continu- 
ing security responsibilities. 

(2) Answer the questions which individuals 
may have about security practices or procedures. 

(3) Serve as a vehicle for explaining new 
changes or requirements in the field of security. 

d. Security Reminders. The fourth phase is the 
use of security reminders. As an indirect ap- 
proach to indoctrination, security reminders 
bring to the attention of individuals their secur- 
ity responsibilities during the normal course of 
their duties. 

e. Security Promotion. The fifth phase is secur- 
ity promotion. An active security promotion pro- 
gram vigorously supported by the command is an 
effective method of maintaining security aware- 
ness. Security promotion fulfills two require- 
ments : 

(1) Provides the command with a method 
for recognition of individual achievement in 
promoting security. 



(2) Increases the security consciousness of 
the command through group participation. 

/. Special Interviews. The sixth phase is the 
special interview. Supervisory personnel should 
be given a special interview. This special inter- 
view should be accomplished in order to obtain 
the following objectives: 

(1) A supervisor should recognize and make 
on-the-spot corrections of faulty or careless prac- 
tices. 

(2) The supervisor should set the example in 
sound security practices and procedures. 

(3) The supervisor should demonstrate a 
healthy attitude toward security. 

g. Debriefing. The last phase of a security edu- 
cation program is debriefing. Security debriefing 
is required whenever a person who has had ac- 
cess to classified information leaves the com- 
mand. Consideration should also be given to con- 
ducting a debriefing upon the completion of spe- 
cific classified projects. The security debriefing 
serves two purposes: 

(1) Special notice to the individual of his 
continuing responsibility to protect classified in- 
formation of which he has knowledge. 

(2) Command assurance that all classified 
documents and other classified material with 
which the individual was charged have been pro- 
perly accounted for. 

10-22. Sources of Material 

In order for any security lecture or security con- 
ference to be effective, appropriate and pertinent 
material must be presented to the participants of 
the conference or lecture. There are many sources 
of material available to the average counterintel- 
ligence unit. A wealth of information can be ex- 
tracted from the files of the unit itself. In the se- 
lection of this material, it is necessary that only 
facts of educational value and motives of interest 
to the audience be selected. If actual cases are used 
as examples, they must be condensed, sanitized, 
and approved for release. Newspaper articles as 
well as the dead files of local newspapers provide 
a wealth of information that can be used in se- 
curity lectures or conferences. A large number of 
books and articles concerning intelligence, espion- 
age, and security have been published. Carefully 
selected extracts from these books make the se- 
curity lecture interesting as well as pertinent. Se- 
curity skits are particularly effective because 
they can be tailored individually to fit any given 
situation. 
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CHAPTER 11 

COUNTERINTELLIGENCE TECHNICAL SURVEYS AND INSPECTIONS 



Section I. GENERAL 



11-1. Definition and Purpose 

a. A counterintelligence technical survey is a 
service provided by counterintelligence units to 
assist commanders in determining the physical 
and electronic security measures necessary to de- 
tect or neutralize attempts at clandestine surveil- 
lance through audio and visual means in locations 
where classified defense information and official 
information of a nondefense nature is present. 

b. A Cl technical inspection is a service per- 
formed by counterintelligence units to assist com- 
manders in determining the effectiveness of es- 
tablished technical security policies and proce- 
dures. The Cl technical inspection verifies compli- 
ance with recommendations of previous technical 
surveys and inspections to insure the elimination 
of technical security hazards and provide techni- 
cal support of limited scope or duration. 

c. Locations where technical surveys and 
inspections may be desired include, but are not 
limited to, offices, war rooms, and conference 
rooms. Information which may be of value to an 
intelligence service or foreign government in- 
cludes not only classified defense information, 
but also information concerning personality 
traits, habits, interests, and family relationships 
of military and civilian personnel assigned to sen- 
sitive positions. 

d. Technical surveys and inspections are con- 
ducted when requested by a commander or di- 
rected by higher authority. Sensitive areas in rel- 
atively constant daily use should be surveyed or 
inspected at irregular intervals of sufficient fre- 
quency to afford maximum security from clandes- 
tine audio and visual surveillance. A technical 
survey or inspection should not be included as a 
integral part of a Cl survey or inspection. 

11-2. Scope 

a. Technical surveys and inspections will deal 
with items of technical security only as they are 



related to counterintelligence. Since there could 
be a degree of overlap with the programs under 
the monitorship of the Provost Marshal General 
and the Chief, United States Army Security 
Agency, there should be coordination with those 
agencies. 

b. A technical survey or inspection is a com- 
plete and detailed examination of all factors, pos- 
itive and negative, which affect the audio and vi- 
sual security of the location or equipment being 
serviced. 

c. Technical surveys will include the following: 

(1) A complete physical, visual, and elec- 
tronic search for unauthorized modification of 
equipment normally found in the area. 

(2) A complete physical, visual, and elec- 
tronic search for clandestine technical penetra- 
tion equipment. 

(3) All procedures necessary to detect the 
presence of conditions which may allow an unau- 
thorized transmission of any conversation out of 
the area or surveillance of any activity occurring 
within the area under search. 

d. Technical inspections are more limited in 
scope than technical surveys, and are designed to 
include those actions and procedures necessary to 
provide the requested service. Examples of activi- 
ties which may constitute a technical inspection 
are: 

(1) Physical and electronic examinations of 
critical equipment such as telephone wires and 
instruments, intercommunications systems, and 
furniture and hardware prior to placement in the 
area. This is done to prevent an unauthorized 
modification and possible use for clandestine sur- 
veillance. 

(2) Electronic examinations and tests sched- 
uled at irregular intervals as a followup inspec- 
tion of an area previously cleared. 

(3) Electronic security monitoring activities 
in the vicinity of sensitive areas during confer- 
ences wherein classified material is presented. 
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Section II. CONDUCT OF COUNTERINTELLIGENCE 
TECHNICAL SURVEYS AND INSPECTIONS 



11—3. Technical Survey 

a. Prior to the actual commencement of the 
technical survey, liaison will be established with 
the installation to be surveyed to determine perti- 
nent factors which will assist in the conduct of 
the survey. This will be accomplished by a con- 
ference among the survey team Special Agent-in- 
Charge, the commander of the installation to be 
surveyed or his designated representatives, and 
the installation’s communication officer. This con- 
ference will acquaint the commander with the pro- 
posed scope of the survey and will establish the 
requirements for cooperation by members of the 
installation. It will include a guided tour of the 
area to be surveyed and will, in addition, include 
arrangements for acquiring access to desks, con- 
tainers, secured areas, and outside perimeter 
areas in which related communication, electrical, 
heating, and plumbing junction facilities are lo- 
cated. It should be emphasized by the Special 
Agent-in-Charge that upon completion of the sur- 
vey the area must be afforded physical security 
commensurate with the highest classification for 
which the area is to be used. At this time, any 
limitations placed on the conduct of the survey by 
the local command should be clarified. One limita- 
tion that should always be considered is the ac- 
tual dates and time of the survey which should be 
classified as CONFIDENTIAL, and annotated 
FOR EYES ONLY for the key personnel, e.g., 
commander, G2/S2, and perhaps the G3/S3. 

b. Technical survey team members will fami- 
liarize themselves with the entire installation to 
be surveyed in order to obtain an overall estimate 
of existing factors which will provide a guide for 
the detailed conduct of the survey. The files of 
the counterintelligence unit are often valuable 
sources of information relative to the installa- 
tion. Reports of previous Cl surveys will contain 
detailed information concerning the security mea- 
sures of the installation and a description of the 
surrounding area, including natural and struc- 
tural elements, which may tend to enhance either 
audio or visual access to the area, or point out 
any limitations imposed on the previous survey 
team. Detailed construction blueprints, as well as 
heating, electrical, and communications details, 
should be obtained if possible. In addition, 
ground maps indicating overhead and under- 
ground utility networks should be available to 
the survey team as required. 



H-4. Preparation of Checklist 

A technical survey consists of a thorough physi- 
cal search and full utilization of available elec- 
tronic and specialized detection equipment and 
devices. The sensitivity of the area, the availabil- 
ity of qualified personnel and technical equip- 
ment, and consideration of the time factor will of 
necessity affect the thoroughness and efficiency of 
the technical survey. Continuing developments in 
the electronic surveillance field make it impracti- 
cal to set forth a definite step-by-step survey pro- 
cedure which may soon be outmoded. Personnel 
who are specially trained in audio surveillance 
countermeasures should be utilized to the fullest 
extent possible in planning and conducting a 
technical survey. Each counterintelligence unit 
should prepare a general checklist to be utilized 
in conducting a technical survey. The checklist 
will insure that all aspects of the survey are 
thoroughly and systematically accomplished ; 
however, the checklist should not restrict the ini- 
tiative of the technician. A sample general 
checklist, which may be used as a basis for prep- 
aration of a checklist, is contained in FM 30-17A, 
the classified supplement to this manual. 

1 1—5. Detection Equipment 

Various types of specialized electronic equipment 
are available to counterintelligence technical per- 
sonnel to assist in locating concealed clandestine 
surveillance and listening devices. The Intellig- 
ence Materiel Support Office, under the control of 
the US Army Intelligence Command, Department 
of the Army, provides funds for certain special 
items. Sufficient reference material, periodical lit- 
erature, and technical information bulletins 
should be procured by units in the field in order 
to keep abreast of the latest developments in elec- 
tronic equipment. Requests for information on, or 
development of, specific items of electronic equip- 
ment should be forwarded through channels to 
the Intelligence Materiel Development Office, 
Fort Holabird, Maryland 21219. 

11—6. Technical Inspection 

The general provisions concerning responsibili- 
ties and planning for the conduct of technical 
surveys (para 11-3—1 1-5) apply equally to the 
conduct of Cl technical inspections. 
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11—7. Discovery of Clandestine Surveillance 
and Listening Devices 

When discovery of a clandestine surveillance and 
listening device is made, a report should be sub- 
mitted immediately as outlined in AR 381-14. 
Counterintelligence units should have a SOP 
which will delineate the action to be taken by 
counterintelligence personnel upon discovery of a 
clandestine surveillance device. It is essential 
that all audio surveillance countermeasures tech- 
nicians be thoroughly familiar with the instruc- 
tions contained in AR 381-14. The discovery of a 
clandestine surveillance or listening device may 



have an impact extending to the highest national 
levels. 

11—8. Reports 

Counterintelligence technical survey and inspec- 
tion reports are prepared in accordance with re- 
porting procedures discussed in chapter 10. These 
reports will include technical data which contrib- 
uted to the conclusions reached in the technical 
survey or inspection. An additional section, “Lim- 
itations,” is normally added to the five sections 
discussed in chapter 10. A sample report of a Cl 
technical survey is contained in appendix C. 
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CHAPTER 12 

CONVENTIONAL COMBAT OPERATIONS 



Section I. INTRODUCTION 



12—1. General 

The field army is provided counterintelligence 
support by a counterintelligence company at field 
army level in the MI Battalion and by counterin- 
telligence elements which are organic to military 
intelligence units attached to corps, divisions, and 
separate brigade-sized organizations. These coun- 
terintelligence elements and units contribute to 
the mission of the commander at each echelon by 
assisting him in carrying out his counterintel- 
ligence responsibilities. 



12—2. The Counterintelligence Mission in 
Tactical Operations 

The counterintelligence mission stated in chapter 
1 of this manual is valid for all operations. Em- 
phasis on certain aspects of the mission will 
change with the tactical situation and will vary 
with the echelon of command. Denial of informa- 
tion to the enemy is one of the most important as- 
pects of the counterintelligence mission at the 
tactical level and receives greater emphasis dur- 
ing actual operations. 



Section II. FUNCTIONS 



12-3. Introduction 

a. Counterintelligence operations are aimed at 
defeating the collection capability of the enemy. 
In rear areas, overall security is indispensable to 
effective support and control of combat forces. 
The enemy can be expected to exploit the loose 
demarcations of the battlefield by the deep pene- 
tration of espionage-sabotage elements, the sub- 
verting of selected elements of the indigenous 
population, and employing guerrilla forces to the 
maximum extent. To counter these threats, coun- 
terintelligence elements must work aggressively 
in close coordination with such related activities 
as psychological warfare, military police, civil af- 
fairs, and air defense units. 

b. Counterintelligence operations within the 
field army under tactical conditions will consist 
generally of the following : 

(1) Personnel security. Background investi- 
gations will continue. Close coordination between 
military and civilian agencies which control per- 
tinent files must be developed to maximize the ef- 
fectiveness of these investigations. 

(2) Physical security. Counterintelligence 
personnel must provide installation and unit com- 
manders with survey and inspection services to in- 



sure protection against physical penetration and 
compromise of classified information and mater- 
iel. The mobility and frequent displacement of in- 
stallations, their proximity to the indigenous pop- 
ulation, and the complications presented by com- 
bined operations with diverse allied forces will 
compound the security problem. Any recommen- 
dation on the use of unattended ground sensors 
by a unit for physical security should be coordi- 
nated with the unit sensor officer to determine his 
capabilities in this area. 

(3) Special weapons security. Special weap- 
ons and associated systems within the field army 
will require increased security efforts on the part 
of both counterintelligence and other agencies 
during use, storage, and transport of system com- 
ponents. 

(4) Civil security. Local civilian elements as 
well as refugees, displaced persons, and indige- 
nous employees of US Forces, will be lucrative 
targets for recruitment by enemy forces for es- 
pionage, sabotage, and subversion. 

(5) Counterespionage, countersabotage, and 
counter subversion. Individuals and groups with 
espionage, sabotage, and subversion missions 
must be identified, located, penetrated, and/or 
neutralized (FM30-17A). 
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12—4. Operations in Forward Areas 

a. Offensive Operations. 

(1) In the attack, emphasis must be placed 
on the neutralization and/or exploitation of Cl 
targets which are known to exist in enemy-held 
areas as reflected in target lists (see FM 
30-17A). To accomplish this task effectively, 
counterintelligence personnel supporting combat 
units may be deployed to forward elements as re- 
quired by the mission. Initial advance by combat 
troops through the objective area may be desired 
prior to the commitment of counterintelligence 
personnel in forward areas. Flexibility must be 
maintained in order to obtain maximum use and 
effectiveness. Counterintelligence needs and re- 
quirements vary constantly and personnel may be 
deployed from one unit to another and from for- 
ward to rear areas as these conditions change. 

(2) Counterintelligence personnel operating 
with forward combat units perform their mission 
within the existing boundaries of the supported 
unit. When rear boundaries are advanced, control 
of the relinquished area will be assumed by the 
counterintelligence elements gaining responsibil- 
ity for the area. All documents and files pertinent 
to the area will be physically transferred, as will 
any personnel held in custody. The gaining ele- 
ment must be thoroughly briefed on affairs of Cl 
interest in the relinquished area. 

b. Defensive Operations. In the defense, coun- 
terintelligence elements in forward tactical areas 
will be most active in combating enemy intellig- 
ence efforts to obtain information and intelligence 
concerning US Forces. Enemy intelligence activi- 
ties may take many forms during this phase of 
operations. 

(1) Deployment of counterintelligence per- 
sonnel normally will differ from that undertaken 
in the attack. In most cases, deployment will be 
in rear areas rather than forward with the com- 
bat units; however, counterintelligence personnel 
will be prepared to operate whenever and wher- 
ever indications of enemy activities require a 
counterintelligence effort. In the defense, empha- 
sis will be placed on such functions as : 

(а) Civilian and prisoner of war screening 
and interrogation. 

(б) Development of effective human 
source programs (FM 30-17A). 

(c) Security of critical installations and 
activities. 

( d ) Continued briefings of military police, 



civil affairs personnel, and G2/S2 staffs on hostile 
intelligence activity and modus operandi. 

(2) Enemy guerrilla forces activities and op- 
erations against installations, supply points, lines 
of communications, and other critical areas will 
increase during defensive operations. 

(3) In the defense, forward area counterin- 
telligence elements may initiate certain special 
operations designed to collect intelligence infor- 
mation or assist the commander in a specific oper- 
ation directed against enemy forces. These opera- 
tions require careful and detailed planning (FM 
30-17 A) and will be controlled and monitored by 
higher commands. Examples are as follows : 

(a) Recruitment of confidential sources 
and their injection into refugee groups and pris- 
oner of war channels. 

( b ) Exploitation of known enemy intellig- 
ence agents. 

(c) Use of deceptive information as di- 
rected by higher commands. 

c. Retrograde Operations. 

(1) Counterintelligence operations must be 
compatible with the courses of action taken by 
the supported combat unit. In a retrograde move- 
ment, the security of troop movements and lines 
of communication is a paramount consideration. 
Other considerations include : 

(a) Evaluation of white and black list 
(see para 12-9) personnel. 

(b) Evaluation of prisoners of war of Cl 
interest. 

(c) Evaluation of confidential sources who 
cannot remain behind for either operational or 
security reasons. 

(2) In conjunction with military police, rigid 
controls over civilians and refugees must be ap- 
plied to detect persons posing a threat to the se- 
curity of friendly operations. Command post 
areas which have been evacuated will be in- 
spected by counterintelligence personnel to insure 
that no information or material has been left be- 
hind which might benefit hostile forces. 

(3) During retrograde operations, the trans- 
fer of areas of responsibility occurs in reverse of 
that for offensive operations. The forward ele- 
ment will establish contact with that element res- 
ponsible for the Cl coverage of the rear area 
which it will occupy; receive a briefing concern- 
ing operations in that area; and receive applica- 
ble files, documents, and personality information 
on sources and other persons of potential Cl 
value within the area. 
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12-5. Rear Area Operations 

a. Counterintelligence Area Coverage. 

(1) Counterintelligence area coverage refers 
'to counterintelligence responsibility applied 
throughout a geographic area for which a specific 
commander may be responsible. In a theater of 
operations, with an army commander as the uni- 
fied commander, US Army counterintelligence 
has the responsibility of conducting all opera- 
tions within the Cl mission necessary to the se- 
curity of the command. A unified commander 
from another service may assign US Army coun- 
terintelligence units an area coverage mission. 
Counterintelligence units may have investigative 
jurisdiction over the activities of indigenous ci- 
vilians and US civilians employed by, or accom- 
panying, the Armed Forces, in addition to the 
normal jurisdiction of Armed Forces personnel. 

(2) Counterintelligence area coverage 
throughout a divisional area is provided by the 
counterintelligence personnel of the division mili- 
tary intelligence company. This same coverage is 
provided in the area extending from the division 
rear boundary to the field army rear boundary by 
the MI Company (Cl) assigned to the MI Battal- 
ion (Field Army). Counterintelligence area cov- 
erage from the field army rear area boundary 
throughout the comminications zone is provided 
by the MI Group (Cl) of the Area Support Com- 
mand (ASCOM). 

(3) Unless the commands to which they are 
assigned or attached are employed separately, Cl 
elements of the MI unit supporting corps, army 
groups, and separate support commands normally 
will not be assigned a Cl area coverage mission. 
Their efforts will be directed toward contributing 
to the internal security of the respective sup- 
ported command and particiapting in counterin- 
telligence planning. 

J b. Rear Area Security. Rear areas may be de- 
' fined broadly as those areas in which combat ser- 
vice support activity is accomplished. Enemy at- 
tacks against administrative support units and 
installations, lines of communications, and vital 
communications centers in rear areas, may jeo- 
pardize the primary mission of combat forces. 
The objective of rear area security is to prevent 
serious enemy interference with all operations in 
rear areas. By the very nature of their mission, 
Cl elements provide area coverage and are in a 
position to provide valuable assistance to sup- 
ported commands in countering enemy activities 



in these areas. Specific Cl activities in support of 
rear area security may include: 

(1) Collection and collation of information 
concerning key personalities among hostile ele- 
ments operating in rear areas. 

(2) Conduct of operations designed to effect 
penetration of hostile intelligence services at all 
echelons. 

(3) Development of civilian human source 
networks dispersed throughout rear areas, which 
will provide timely and pertinent information. 

(4) Application of surveillance techniques 
to known, suspected, or potential hostile bases of 
operations. 

(5) Search and seizure operations against 
hostile personalities, installations, organizations, 
or those sympathetic to the hostile cause. 

(6) Conduct of Cl security and technical 
surveys and inspections of US and, if directed, al- 
lied installations in US rear areas. 

(7) Assistance to rear area security ele- 
ments in the denial of known, suspected, or po- 
tential sources of food, supply, or other support 
to hostile groups. 

(8) Assistance to and support of the con- 
tinuing program of security orientation and in- 
doctrination of all command personnel, with em- 
phasis on the provisions of AR 381-12. 

(9) Contribution to, or, if directed, prepara- 
tion of, recurring memoranda to all command 
echelons concerning current trends or modus op- 
erandi of hostile intelligence. 

(10) Contribution to, or, if desired, prepara- 
tion of, portions of command policy documents 
concerning countersubversion and countersabo- 
tage. 

(11) Preparation or recommendation of spe- 
cific Cl measures to unit and installation com- 
manders for the enhancement of security prac- 
tices to include such items as the detection of be- 
havioral patterns detrimental to the security of 
the command. 

c. Special Situations. Assignments demanding 
a high degree of alertness, flexibility, and re- 
sourcefulness on the part of counterintelligence 
personnel may include — 

(1) Areas where the populace is basically 
hostile to US interest. 

(2) Areas especially vulnerable to insur- 
gency activities. 
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(3) Areas in which targets of known enemy 
high-priority collection tasks (or interest) are lo- 
cated. 

12—6. Other Tactical Operations 

a. Counterintelligence personnel may be re- 
quired to provide Cl support for other tactical op- 
erations. Normally, Cl elements will be attached 
to the supported unit for the duration of the op- 
eration and tailored to meet the demands of the 
specific operation. Airborne, amphibious, separate 
task force, and internal defense/development op- 
erations (chap 13) will require varying degrees 
of Cl support and participation. In addition, Cl 
support and assistance may contribute materially 
to the success of unconventional warfare opera- 
tions by furnishing timely and accurate informa- 
tion related to enemy-occupied terrritory into 
which operations are planned. 

b. In most special tactical operations, the se- 
curity of the operation itself, from the time of in- 
ception to the time of initiation, is of utmost im- 
portance. Counterintelligence efforts, in conjunc- 
tion with G3 personnel will be directed toward 
denying the enemy access to information concern- 
ing the time, destination, and objectives of the 



mission during the planning and preparation 
phase. Measures to be considered include: 

(1) Increased emphasis on counterespionage 
activities (FM 30-17A). 

(2) Increased security indoctrination and 
training to include Cl security and technical 
inspections. 

(3) Rigidly controlled security measures to 
include restriction of personnel, if necessary. 

(4) Security of training, logistical and re- 
connaissance activities as well as other prepara- 
tions or activities which could indicate pending 
operations. 

(5) Security of assembly and departure 
areas to preclude infiltration of unauthorized per- 
sonnel, and provide for maximum reduction of 
casual observation opportunities. 

c. During the operation itself, the amount and 
type of Cl support required will be influenced by 
the size and scope of the operation, the objective 
area and the location and availability of Cl tar- 
gets. The deployment of counterintelligence per- 
sonnel will be dependent upon the targets to be 
neutralized or exploited in the objective area. 



Section III. PLANNING AND CONDUCT OF OPERATIONS 



1 2—7. Introduction 

Counterintelligence planning is accomplished 
concurrently with the planning and conduct of 
theater army operations plans and policies. 
Within that broad framework, Cl plans at lower 
echelons will be increasingly detailed but flexible. 
All aspects of Cl activities required to insure ade- 
quate direct support for all phases of operations 
of the supported units will be considered. The ef- 
fectiveness of counterintelligence operations in 
tactical areas depends largely upon the planning 
preceding the operation. FM 30-5 contains exam- 
ples of the plans utilized by counterintelligence 
personnel. 

12—8. Target Selection and Priorities 

a. The selection and assignment of Cl targets 
should be based on an assessment of the overall 
hostile threat. This assessment is the responsibil- 
ity of the G2, Theater Army, and should take into 
consideration both the immediate and obvious 
threats to security as well as future threats 
which can be anticipated. A thorough Cl target 



analysis should encompass the relatively perma- 
nent features and fundamental characteristics of 
a country, area, or broad special subject to in- 
clude the political, economic, military, and sociol- 
ogical aspects. 

b. Numerical priority designations which em- 
phasize the relative importance or value of Cl 
targets and which designate to the responsible 
unit(s) the degree of interest expressed by the 
requester will be influenced by : 

(1) Security threat posed by the target. 

(2) Relative urgency of need for the neu- 
tralization or exploitation of the target. 

(3) Capabilities of the units responsible for 
accomplishing the tasks. 

Priority designations which have been estab- 
lished at theater level and forwarded to lower 
echelons will not be altered. Local Cl elements 
may assign priorities to targets locally developed. 
Counterintelligence personnel must adjust their 
daily operations to conform with the established 
priorities. 
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12—9. Counterintelligence Targets 

Counterintelligence targets include personalities, 
installations, organizations, groups, documents 
and materiel. Information on these targets can 
often be obtained through civil affairs units or 
Civil-Military Operations Staffs, G5/S5. Civil af- 
fairs units are also principal users of this type of 
intelligence. 

a. Personalities. 

(1) Black list. Black lists are developed or 
compiled at all echelons of command and contain 
the identities and locations of individuals whose 
capture and detention are of prime importance to 
the US Army. Black lists include — 

(a) Known or suspected enemy or hostile 
espionage, sabotage, political, and subversive in- 
dividuals. 

(b) Known or suspected leaders and mem- 
bers of hostile paramilitary, partisan, or guer- 
rilla groups. 

(c) Political leaders known or suspected 
to be hostile to the military and political objec- 
tives of the United States and/or an allied nation. 

( d ) Known or suspected officials of enemy 
governments whose presence in the theater of op- 
erations poses a security threat to the US Forces. 

(e) Known or suspected enemy collabora- 
tors and sympathizers whose presence in the the- 
ater of operations poses a security threat to the 
US Forces. 

(/) Known enemy military or civilian 
personnel who have engaged in intelligence, coun- 
terintelligence, security, police, or political indoc- 
trination activities among troops or civilians. 

(fiO Other personalities indicated by the 
G2 as automatic arrestees. Included in this cate- 
gory may be local political personalities, police 
chiefs, and heads of significant municipal and/or 
national departments or agencies. 

(2) Gray list. Gray lists, which are compiled 
or developed at all echelons of command, contain 
the identities and locations of those personalities 
whose inclinations and attitudes toward the polit- 
ical and military objectives of the United States 
are obscure. Regardless of their political inclina- 
tions or attitudes, personalities may be listed on 
gray lists when they are known to possess infor- 
mation or particular skills required by US 
Forces. They may be individuals whose political 
motivations require further exploration before 
they can be utilized effectively by US Forces. Ex- 
amples of individuals who may be included in 
this category are : 



(a) Potential or actual defectors from the 
hostile cause whose bona fides have not been es- 
tablished. 

( b ) Individuals who have resisted, or are 
believed to have resisted, the enemy government 
and who may be willing to cooperate with US 
Forces, but whose bona fides have not been estab- 
lished. 

(c) Nuclear scientists, physicists, and 
technicians suspected of having been engaged in 
enemy nuclear research projects or nuclear mis- 
sile programs against their will. 

(3) White lists. White lists are compiled or 
developed at all echelons of command and contain 
the identities and locations of individuals in en- 
emy-controlled areas who have been identified as 
being of intelligence or Cl interest and are ex- 
pected to be able to provide information or assist- 
ance in the accumulation of intelligence data or 
in the exploitation of existing or new intelligence 
areas-of-interest. They are uaually in accord 
with, or favorably inclined toward, US policies. 
Their contributions are based on a voluntary and 
cooperative attitude. Decisions to place individu- 
als on the white list may be affected by the com- 
bat situation, critical need for specialists in scien- 
tific fields, and such theater intelligence needs as 
may be indicated from time to time. Examples of 
individuals who may be included in this category 
are: 

(a) Former political leaders of a hostile 
state who were deposed by the hostile political 
leaders. 

( b ) Intelligence agents employed by US or 
allied intelligence agencies. 

(c) Key civilians in areas of scientific re- 
search, which may include faculty members of 
universities and staffs of industrial or national 
research facilities, whose bona fides have been es- 
tablished. 

( d ) Leaders of religious groups and other 
humanitarian groups. 

(e) Other persons who can materially and 
significantly aid the political, scientific, and mili- 
tary objectives of the US whose bona fides have 
been established. 

b. Installations. The installation target is any 
installation which is of interest or poses a threat 
to the security of US Forces in the area. These 
installations provide information of significant 
value if exploited; they can also pose a definite 
threat to our security if imporperly treated. Con- 
tinued operation of these installations during 
combat operations may jeopardize the com- 
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mander’s successful accomplishment of his mis- 
sion. Installation type targets of interest to the 
military commander, and of immediate concern to 
counterintelligence, can be found in any average 
town or city regardless of its location. Examples 
of installation type targets are as follows : 

(1) Civilian communications media. 

(2) Enemy signal communications centers. 

(3) Nuclear research centers and chemical 
laboratories. 

(4) Installations formerly or currently oc- 
cupied by enemy espionage, sabotage, and subver- 
sive agencies, or enemy police organizations, to 
include prisons. 

(5) Installations occupied by enemy intellig- 
ence or security organizations. 

(6) Ordnance repositories. 

(7) Embassies and consulates of hostile gov- 
ernments. 

(8) Military installations. 

c. Organizations and Groups. Any organization 
or group which is an actual or potential threat to 
the security of US or allied forces must be neu- 
tralized. The threat which an organization or 
group presents may not be immediately apparent 
to the military commander, the G2, or the coun- 
terintelligence unit. The enemy will frequently 
camouflage his espionage or subversive activities 
with the establishment of front organizations or 
groups which, if permitted to remain in being, 
could impede the success of the military opera- 
tions. Examples of hostile organizations and 
groups which are of major concern to the coun- 
terintelligence unit during tactical operations are 
as follows : 

(1) National and local political groups and 
parties known to have or suspected of having 
aims, beliefs, or ideologies contrary or in opposi- 
tion to the United States. 

(2) Paramilitary organizations to include 
student, police, militia/veterans, and excombatant 
groups known to be hostile to the United States. 

(3) Hostile sponsored groups and organiza- 
tions whose objectives are to create dissension 
and spread unrest among the civilian population 
in the theater of operations. 

(4) Headquarters, provincial, and municipal 
offices of those hostile organizations indicated by 
the theater commander as subject to immediate 
neutralization. Personalities related to those 
offices should be arrested and detained. 



d. Documents and Materiel. Counterintelligence 
units engaged in tactical operations in a theater 
of operations are specifically charged with the ex- 
ploitation of certain type targets known to contain 
or suspected of containing documents, equipment, 
or materiel of intelligence or counterintelligence 
value. When assigned such missions, it is impera- 
tive that counterintelligence personnel proceed to 
the target area with a minimum loss of time in 
order to confiscate and secure the documents 
and/or materiel before they can be destroyed. 
Some of the documents and material of intellig- 
ence or counterintelligence interest are as fol- 
lows: 

(1) Files and records of enemy intelligence 
operational bases, schools, and training centers. 

(2) Files and records of courts, prisons, 
jails, and police and executive files of political ad- 
ministrations. 

(3) Files and records of national intelligence 
agencies, paramilitary organizations, and secret 
police agencies. 

(4) Manufactured products or such other 
materiel which, when left unguarded, may provide 
support to hostile guerrilla and partisan elements 
in rear areas. 

(5) Special items of war which require pres- 
ervation for technical intelligence examinations. 
These may include chemical warfare products, 
ordnance items, pilot products, ordnance re- 
search, guided missiles and sites, aircraft, carto- 
graphic stores, and communications equipment to 
include radio, radar, electronic, and telemetric de- 
vices. 

12—10. Neutralization and Exploitation 

a. Operational Support. 

(1) Tactical troop augmentation. Counterin- 
telligence elements involved in tactical operations 
do not have the capability to provide guards or 
take under physical control those Cl targets from 
which hostile resistance continues. The MI unit 
commander must, in his planning, estimate his 
needs far enough in advance so that requests for 
additional personnel or assistance in the objective 
areas are made known to the G2 of the major 
command prior to an offensive operation. The G2 
will arrange to obtain those personnel necessary 
for the accomplishment of the mission. Once 
entry has been made into the target area by coun- 
terintelligence personnel, a preliminary search 
has been completed for information of intellig- 
ence or Cl value, and the employees or occupants 
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have been located or detained, the physical 
guarding or control of the target is turned over 
to guard personnel or the service or agency with 
primary interest in the target. How and when 
troops are assigned specific guard functions 
around these Cl targets will be influenced by 
local requirements. In some instances, guard per- 
sonnel may accompany Special Agent teams to 
the target area ; in other cases, they may rendez- 
vous with the teams in the target area. It must be 
understood, however, that the tactical effort, ex- 
cept in unusual cases, takes precedence over Cl 
target neutralization and exploitation. If tactical 
troop augmentation is not possible, the Cl ele- 
ment may have to rely on its own limited capabil- 
ities to neutralize or exploit the targets. 

(2) Civil police support. Counterintelligence 
elements involved in tactical operations may re- 
quest and receive support from civil police agen- 
cies in friendly controlled territories. Normally, 
this support is arranged through the G2 in coor- 
dination with the G3 or G5. Civil police may be 
utilized to accompany Special Agent teams on 
target neutralization missions, assist in appre- 
hensions of target personalities, and provide 
guards for installations which have been neutral- 
ized. Considerable time and effort may be saved 
in the performance of the counterintelligence 
mission if good liaison and working relationships 
can be established with the local civil police 
forces. 

b. Target Personalities. The processing of tar- 
get personalities apprehended by Cl elements op- 
erating in tactical areas will generally be accom- 
plished according to procedures established by 
field army. In most cases prisoners of continuing 
Cl interest apprehended in forward combat areas 
will be evacuated as soon as possible to higher 
echelons. It is essential that such prisoners not be 
lost in the stream of other prisoners captured by 
the tactical units. The tactical situation may not 
permit the immediate routing or evacuation of 
target personalities, but it may be possible to 
temporarily secure the prisoner in a local jail or 
prison. Counterintelligence prisoners should not 
be permitted to come into contact or associate 
with the other prisoners. A record of prisoners 
incarcerated temporarily must be forwarded to 
field army so that action may be taken, when the 
tactical situation permits, to interrogate and 
make disposition of the prisoners. Target per- 
sonalities often prove to be valuable sources of 
combat and strategic intelligence information. 
Action should be taken to promptly elicit all in- 



formation of immediate tactical interest to 
friendly forces, and to make these persons availa- 
ble for interrogation by other agencies. Black and 
gray list personalities are not expected to be 
cooperative under interrogation; however, coun- 
terintelligence personnel should be alert to indi- 
cations that these individuals may cooperate in 
return for preferential treatment. 

c. Target Installations. The exploitations of in- 
stallation targets may be accomplished immedi- 
ately following the neutralization of the installa- 
tion by counterintelligence personnel, or at a 
later date if exploitation is not immediately possi- 
ble due to the tactical situation or for other rea- 
sons. During the exploitation phase, the installa- 
tion will be searched thoroughly for documents, 
equipment, and materiel of intelligence or Cl in- 
terest. Disposition instructions concerning docu- 
ments and materiel captured by counterintel- 
ligence personnel while involved in tactical oper- 
ations will be found in command SOP or in FM 
30-16. Documents, to include files and records, 
should be evacuated only through intelligence 
channels. In some instances, it may be advisable 
or desirable for the documents or materiel to re- 
main within the installation, building, office, or 
billet where found until such time as they can be 
thoroughly examined or analyzed by other coun- 
terintelligence or technical intelligence personnel. 

12—11. Tactical Counterintelligence 
Interrogations 

a. General. The circumstances of combat and 
the counterintelligence operations in tactical 
areas complicate the task of the Special Agent in- 
terrogator. There may be overwhelming numbers 
of people who are looked upon as threats to se- 
curity, perhaps solely due to their presence in the 
combat zone. The number of suspect personnel 
will vary, but it frequently will be large enough 
to preclude detailed interrogation of all but a se- 
lected few. Counterintelligence personnel will be 
partly dependent on such agencies as the provost 
marshal, Civil Affairs (CA) units, and prisoner 
of war interrogators to identify suspect persons 
or persons of Cl interest. In some situations, the 
number of persons volunteering information to 
counterintelligence personnel will be large 
enough to necessitate a preliminary screening op- 
eration to permit concentration on those of the 
greatest potential interest or value. Most suspects 
are apprehended as they try to enter or leave a 
zone of operations. If they are in fact enemy 
agents, they will have cover stories closely paral- 
leling their true environments and identities. The 
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Special Agent’s success in such interrogations 
will be dependent primarily on his questioning 
skill, linguistic ability, knowledge of the area of 
operations and adjacent areas, and familiarity 
with the intellectual, cultural, and psychological 
peculiarities of the persons encountered. 

b. Types of Subjects. As the battle lines in 
combat change, entire segments of the population 
may be overrun. The local population in any area 
may be swelled by refugees and displaced persons 
(persons from other lands conscripted by enemy 
forces for labor). The following categories of 
persons are of Cl interest : 

( 1 ) Refugees and displaced persons. 

(2) Line crossers. 

(3) Deserters from enemy units. 

(4) Civil prisoners and enemy prisoners of 

war. 

(5) Inmates of concentration camps. 

(6) Repatriated prisoners of war and escap- 
ees. 

(7) Members of underground resistance or- 
ganizations seeking to join friendly forces. 

(8) Collaborators with the enemy. 

(9) Target personalities, such as black, 
gray, or white list personalities. 

(10) Volunteer informants. 

(11) Persons who must be questioned because 
they are under consideration for employment 
with US Forces or for appointment as civil 
officials by CA units. 

c. Other Interrogations. If the security of US 
personnel, units, installations, and military oper- 
ations is to be maintained, the threat posed by 
the civil population must be ascertained. Rela- 
tively large scale interrogations of civilians may 
be necessary to ferret out concealed enemy 
agents. Civilians are also a source of tactical and 
strategic intelligence as well as counterintel- 
ligence information. In a combat area persons are 
often eager to denounce neighbors or acquaint- 
ances for personal reasons or gain; much of this 
information may be of little value. 

d. Objectives of Counterintelligence Interroga- 
tions. The counterintelligence interrogation in 
combat areas assists in the accomplishment of 
three major objectives. 

(1) In the screening process, the Special 
Agent helps remove from the battlefield the refu- 
gees whose very presence threatens overall secur- 
ity. 



(2) In detailed interrogations, the Special 
Agent detects enemy agents with espionage or 
sabotage missions. 

(3) The wide range of his activities permits 
the Special Agent to collect information of value 
to other intelligence and security agencies and 
the planners of military operations. He must be 
especially alert to obtain and report information 
of immediate tactical value which was not 
gleaned from the refugee by prisoner of war in- 
terrogators. 

e. Indicators Warranting Suspicion. Because 
the Special Agent usually lacks positive evidence 
and obtaining confirmation of a suspect’s story is 
an improbability, he must be alert during interro- 
gations for indications of espionage or agent ac- 
tivity. Indications which separately or collec- 
tively may give rise to the suspicion that a sub- 
ject is in the employ of, or acting in sympathy 
with, enemy forces are as follows : 

(1) Access to information or targets. A 
prospective espionage or sabotage agent must 
have access to the information desired by the 
enemy or the target installation to be destroyed 
in order to carry out his mission. Hence, the in- 
terrogation should establish a subject’s accessibil- 
ity to potential targets, including his location at 
the time he was apprehended. 

(2) Technical skills. Proficiency in certain 
technical skills is frequently an attribute of an 
espionage or sabotage agent. The subject who has 
a mastery of one or several foreign languages, a 
knowledge of radio operation or of cryptography 
should be questioned carefully on the nature and 
purpose of his training in those fields. His practi- 
cal experience and his work in those fields during 
or shortly prior to the war should give the Spe- 
cial Agent cause for strong suspicion, and the in- 
dividual’s story must be closely examined. Tech- 
nical advice for the interrogation of such individ- 
uals should be obtained from USASA elements. 

(3) Documents and funds. An overabund- 
ance of documents and “new” documents of ques- 
tionable authenticity give reason for doubt and 
should be the basis for detailed questioning. Dis- 
crepancies in document’s contents or conflicts be- 
tween data and the subject’s story have fre- 
quently led to detection of hostile agents. Unex- 
plainable possession of large amounts of money, 
valuable jewelry, or other items of great value 
should be questioned carefully. 

(4) Pro-enemy background. Residence or 
travel in enemy territory, membership in a hos- 
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tile party, or known former collaboration with 
the enemy are facts of obvious importance. The 
Special Agent must determine whether the sub- 
ject is actually in sympathy with the enemy or 
has acted merely to serve his own best interests 
with regard to his life, the welfare of his family, 
or his property. 

(5) Family in enemy-held areas. Enemy 
pressure is often applied to individuals whose 
families reside under enemy control ; particu- 
larly, if the family had no past connection with 
the enemy-held area. 

(6) Inconsistent story. Small discrepancies 
in the subject’s story may be important. Distance 
compared to travel time, accent peculiar to an 
area the subject refuses to acknowledge as his 
own, unreasonable explanation of deferment, ex- 
emption, or discharge from military service, ex- 
emption from labor conscription, or implausible 
reasons for risking the crossing of battle lines 
may be warning signals to the counterintelligence 
interrogator. Contradictions in a subject’s story 
do not warrant jumping to conclusions; however, 
the Special Agent must remain alert to all possi- 
bilities. Allowances must be made for defective 
memory or lack of logic due to the emotional 
stress of a subject. 

(7) Suspicious actions or activities. Unusual 
interest displayed by indigenous persons in troop 
units or equipment, or persistent loitering in the 
vicinity of troop units and installations without 
reasonable explanation should be sufficient to 
warrant interrogation for the purpose of clarify- 
ing the status of a person so involved. 

(8) Violations of civil or military regula- 
tions. Mere violation of military regulations in an 
area controlled by the military, such as manda- 
tory registration, curfews, travel restrictions, or 
declaration of weapons, may be relatively unim- 
portant to Cl elements. However, the motives 
which such violations despite severe penalties 
must be compelling, and may possibly be of great 
interest to counterintelligence personnel. 

(9) Modus operandi. The frequent similarity 
of tactics of hostile agents working for the same 
enemy agency or force, means of contact with 
their agent handlers, type of cover story, and 
manner of collecting and reporting their informa- 
tion may lead to identification of suspects with a 
known enemy agency or group. Established pat- 
terns of activity or behavior of enemy agents 
should be disseminated to all intelligence and se- 
curity agencies to assist in the identification of 
agents still operating. 



/. Screening or Preliminary Interrogation. 
Preliminary interrogation and screening are gen- 
erally synonymous, except that the former indi- 
cates that there will be a followup detailed inter- 
rogation, while screening involves the selection 
by brief questioning of a relatively small number 
from a large group for detailed interrogation 
(para 12-16). In both cases the technique, pur- 
pose, and scope of the questioning are generally 
the same. The object is to select for detailed in- 
terrogation a reasonable number of persons who 
appear to be suspect or knowledgeable on matters 
of Cl interest. Preliminary interrogation or 
screening is generally concerned with identity, 
background, recent activities, and travel or es- 
cape routes. Arrested civilians who are to un- 
dergo preliminary interrogation or screening 
must first be searched for weapons and evidence ; 
the life of the Special Agent and the success of 
the preliminary interrogation may depend on it. 
Documents and personal belongings of a subject 
must be examined; the circumstances of appre- 
hension, if by personnel of another unit, must be 
studied. Available files should be checked. Coun- 
terintelligence units normally prepare a standard 
screening report form to serve as a guide and 
convenience for the Special Agent. Circumstances 
at the time, number of persons to be screened, 
and number of Special Agent interrogators avail- 
able will dictate the length or detail of the 
screening. Generally, the following items will be 
the basic data to be developed during screening or 
preliminary interrogation : 

(1) Subject’s name and aliases. 

(2) Date and place of birth. 

(3) Nationality, past and present. 

(4) Family, complete with addresses. 

(5) Education. 

(6) Technical skills. 

(7) Occupation. 

(8) Places of residence with dates. 

(9) Religion. 

(10) Political affiliations. 

(11) Military history. 

(12) Wartime activities. 

(13) Circumstances preceding apprehension. 

(14) Reason for presence in the area. 

(15) Information of counterintelligence or in- 
telligence interest. 
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In large scale screening operations, shortage of 
time may be a critical factor. It may be advanta- 
geous to have the subjects fill out forms if they 
are able to do so. A study of the form with ques- 
tions on any suspicious entries must follow ; how- 
ever, well trained professional agents will rarely 
be exposed by use of this technique. If detailed in- 
terrogation appears to be warranted, the subject 
is isolated for evacuation or transportation to the 
appropriate interrogation site. This rule applies 
not only to suspects but to persons with an abun- 
dance of information of counterintelligence or in- 
telligence interest. A copy of the screening report 
should accompany the subject to the next interro- 
gation site. 

g. Detailed Interrogation. Detailed Cl interro- 
gations may be conducted in joint interrogation 
centers (FM 30-15) or at interrogation sites es- 
tablished by intelligence units (usually at field 
army or higher level). Detailed interrogation 
does not differ radically from the preliminary in- 
terrogation except that attention is now focused 
on individuals who are suspect or who are known 
to have extensive information of interest. A study 
of the preliminary interrogation or screening re- 
port, examination of the subject’s documents and 
belongings, and checks of available files and in- 
formation must be conducted and analyzed in 
preparation for the interrogation. The Special 
Agent then proceeds with the interrogation using 
techniques discussed in FM 30-15. 

(1) Details of the subject’s personal history 
must be reviewed. Should the subject confess that 
he is an enemy agent, he becomes an important 
source of information on hostile intelligence 
methods of operation and, perhaps, on identities 
of other hostile agents, unless, of course, he is a 
confusion agent. This will lead to exhaustive in- 
terrogations on such issues as hostile intelligence, 
operations, identities of agents, the manner of his 
recruitment, training he received, missions he 
was assigned, and those he accomplished. 

(2) The suspect or any person being interro- 
gated may also be an important source of infor- 
mation of intelligence value, strategic or tactical. 

(3) The questioning usually should follow a 
logical sequence to avoid confusing the subject 
and to facilitate reporting. An illogical sequence 
may be used as a technique to purposely confuse 
the subject so that he will inadvertently contra- 
dict himself. The Special Agent must be alert for 
discrepancies. He must retain his psychological 
advantage. 



12-12. Investigations and Internal Security 
Functions 

There are certain unique additional problems 
that may confront counterintelligence personnel 
while conducting investigations and services in a 
tactical environment. 

a. Indigenous Personnel. 

(1) Counterintelligence elements are respon- 
sible for conducting security investigations of in- 
digenous personnel retained in their official civil- 
ian positions and of other civilian personnel to be 
employed by the US Army in a theater of opera- 
tions. The scope of investigation normally will 
depend on the position or job for which the per- 
son is applying and the degree of sensitivity and 
access to classified defense information. AR 
604-5 discusses details concerning the conditions 
under which indigenous employees may be 
granted access to classified defense information. 
The final decision on employment clearance re- 
mains a command responsibility. Difficulty may 
be often encountered by the Special Agent be- 
cause of lack of files, records, and other reposito- 
ries of civilian police and other investigative 
agencies which have been destroyed or displaced 
as a result of tactical operations. Every attempt 
must be made to check all files and records which 
may be available. Utilization of indigenous per- 
sonnel by US Forces presents a definite security 
threat because of enemy penetration efforts utiliz- 
ing indigenous civilian employees who are sympa- 
thetic with, or may be coerced into serving, the 
enemy cause. Caution must be exercised by all 
using units to preclude compromise of classified 
information. A threat just as serious is posed by 
the capability of employees to collect volumes of 
unclassified information on planned movements 
or tactical operations of US units. Any indication 
of disloyalty or other suspicious conduct on the 
part of the indigenous employee will be reported 
immediately to the intelligence officer of the com- 
mand through appropriate channels. Once a labor 
pool of cleared indigenous personnel has been es- 
tablished in the command, units normally will 
hire only from this pool. The command should 
publish an SOP concerning hiring, utilization, 
and control of indigenous personnel. Civil affairs 
under the staff supervision of the Assistant Chief 
of Staff for Civil-Military Operations (G5) has 
the responsibility for providing labor for mili- 
tary forces and coordinating with Cl elements 
concerning measures to provide necessary secur- 
ity screening of indigenous personnel considered 
for employment. Counterintelligence elements 
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will maintain a close working relationship with 
CA elements and Civil-Military Operations staffs 
at all echelons within the theater. The security 
problem does not end with clearances. A close 
continuing watch or check on employees must be 
maintained. 

(2) Counterintelligence personnel fre- 
quently must rely on qualified indigenous civil- 
ians or members of allied forces to serve as inter- 
preters and translators. Properly utilized and 
controlled, indigenous interpreters have proved 
to be of great value to Cl operations. They are ca- 
pable of detecting dialect differences and discrep- 
ancies in civilian accounts of incidents or circum- 
stances and are frequently more discerning in in- 
terrogations dealing with local civilians and hos- 
tile intelligence agents. They familiarity with the 
country in terms of regional, religious, social and 
political schisms, attitudes, and prejudices repre- 
sents skills not easily developed by counterintel- 
ligence personnel from a different environment. 
On the other hand, these same advantages may 
influence interpreters’ work and color their re- 
ports. Indigenous employees of Cl elements must 
be strictly controlled by Special Agents. Over- 
familiarity, lack of restraint, freedom of move- 
ment, and independent actions on the part of the 
indigenous employees are unacceptable. FM 
30-15 discusses the use of interpreters and the 
necessity for security clearances. 

b. Riots and Civil Disturbances. FM 19-15 out- 
lines the responsibilities of the major commander 
and the utilization of troops when riots and civil 
disturbances occur in territories where US troops 
are stationed by agreement or consent, or in areas 
occupied as a consequence of belligerent actions. 
Effective counterintelligence, however, may pre- 
clude riots and disturbances. Continuous efforts 
by counterintelligence with close coordination 
with the Provost Marshal and the G5 must be 
made to determine the probable causes of riots 
and disturbances, locations where they may 
occur, types, and number of people involved, 
identities of leaders, and whether the riots or dis- 
turbances are enemy sponsored and directed. 
With this knowledge, the commander can take 
necessary action to eliminate potential causes of a 
riot or civil disturbance. 

c. Troop Movement Security. 

(1) Troop movement security is designed to 
prevent espionage or sabotage from interfering 
with the movement of US Forces, insure the ele- 
ment of surprise, and deny information regarding 



the movement itself, its purpose, implications, 
and organization. Counterintelligence personnel 
may be called upon to provide advice and assist- 
ance in the planning and conduct of troop move- 
ments. Some of the services which may be pro- 
vided by counterintelligence personnel include — 

(a) Acting in an advisory capacity or as 
assistants to the G2/S2 in the preparation of the 
Cl portion of the movement plan. 

( b ) Conducting Cl surveys and inspec- 
tions, recommending measures for maximum se- 
crecy, and providing assistance in instructions to 
unit personnel concerning troop movement secur- 
ity. 

(c) Observing the move to report and in- 
vestigate security violations or other security 
threats. 

(2) Regardless of the type and mode of 
transportation utilized for the move, the follow- 
ing security measures must be considered : 

(а) Mail censorship. 

(б) Monitoring or restriction of communi- 
cation facilities. 

(c) Emphasis on security education pro- 
grams. 

( d ) Establishment of curfew hours or res- 
trictions. 

( e ) Conduct of surveillances of areas and 
facilities which military personnel frequent dur- 
ing off-duty hours and where “loose talk” may be 
prevalent. 

(/) Removal of identifying marks and in- 
signia from clothing, equipment, and vehicles. 

( g ) Arrangements for storage or destruc- 
tion of personal diaries, letters, telegrams, and 
other documents or papers. 

(h) Prevention of unauthorized press re- 
leases. 

( i ) Posting of security guards at loading 
or embarkation areas, critical or congested areas 
along the route, and off-loading or debarkation 
sites. 

(j) Crating, covering, and guarding mate- 
rial and equipment to conceal its identity and 
provide protection from unauthorized access dur- 
ing the move. 

( k ) Examination of departed areas to in- 
sure that no information of intelligence value has 
been left behind which might disclose the destin- 
ation, identity, and mission of the unit. 

( l ) Examination of the intended destina- 
tion for physical security hazards when possible. 

(m) Dissemination of false information 
designed to deceive or mislead the enemy as to 
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the actual intentions of the move, when approved 
by the theater commander or higher authority. 

d. Special Weapons Security. 

(1) Special weapons systems require many 
sensitive components, as well as ancillary equip- 
ment and supporting documents. The security, 
classification and the sensitivity of these systems, 
related equipment, and documents dictate the ne- 
cessity for strict security measures. Counterintel- 
ligence personnel assist special weapons unit 
commanders and others with responsibility for 
these systems in establishing adequate security 
measures at special weapons sites for moves of 
special weapons and munitions, and at storage 
depots. This assistance is provided in the form of 
Cl surveys and inspections, monitoring of ship- 
ments and deliveries to sites or depots, aid in 
conducting effective security education programs, 
and coordinating with other units (e.g., military 
police) responsible for providing security for 
these systems. 

(2) Regulations governing security require- 
ments for special weapons systems provide mini- 
mum security standards and criteria for safe- 
guarding the weapons and their components. 
Counterintelligence personnel involved in special 
weapons security must be familiar with these 
regulations, particularly as they pertain to coun- 
terintelligence responsibilities (see AR 50-2, AR 
50-3, AR 190-60, and AR 611-15). 

(3) Special weapons systems are prime tar- 
gets for sabotage. Counterintelligence personnel 
conducting investigations of sabotage or sus- 
pected sabotage of special weapons systems 
should request assistance, as required, of techni- 
cally qualified personnel. 

Section IV. TACTICAL 

12-15. General 

In a combat environment Cl elements can support 
the commander by conducting Cl-oriented tactical 
support operations from the divisional and sepa- 
rate brigade MI units. These missions should not 
become the bulk of the element’s activities for the 
tactical unit but should be a complement to the 
other basic Cl tasks previously mentioned in this 
manual. The basic limitations on the use of coun- 



12-13. Files and Reports 

Counterintelligence elements engaged in tactical 
operations are responsible for developing and 
maintaining their own operational files. These 
files will be transferred to the Cl element gaining 
area responsibility as tactical elements displace. 

a. Operational Files. Information concerning 
individuals, organizations, and other subjects of 
Cl interest is assembled and maintained by Cl 
elements engaged in tactical operations for the 
purpose of furthering the investigative and se- 
curity mission. This information should be kept 
to a minimum, consistent with operational needs. 
Operational files maintained may include, but are 
not limited to — 

(1) Personality files on individuals of cur- 
rent or future Cl interest. 

(2) Impersonal files such as dossiers on or- 
ganizations and groups of current or future Cl 
interest. 

(3) Correspondence and other reports con- 
cerning current or pending operations and inves- 
tigations. 

(4) Hold files containing essentially a collec- 
tion or summary of all Cl operational activities 
and information assembled during the period in 
which the unit has operated in a particular geo- 
graphic area. 

b. Reports. Counterintelligence units and ele- 
ments involved in tactical operations will use 
standard reports and message forms. The basic 
forms of Cl reports are explained in chapter 7 
and appendix B. 

1 2-1 4. Special Operations 

The planning and conduct of Cl special opera- 
tions is included in the classified supplement to 
this manual, FM 30-17A. 



SUPPORT OPERATIONS 

terintelligence personnel as outlined in AR 
381-150 still apply. 

12-16. Counterintelligence Screening 
Operations 

a. General. Counterintelligence screening oper- 
ations in a conventional combat environment 
consist of refugee and prisoner of war screening 
and mobile and static checkpoints which are dis- 
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cussed below. These operations normally are con- 
ducted with other elements such as military po- 
lice (MP), combat troops, civil affairs and psy- 
chological operations teams, and they require 
close coordination and joint planning. 

b. Counterintelligence Screening. Refugee and 
prisoner of war screening by counterintelligence 
personnel is conducted with the view to intercept- 
ing hostile intelligence agents, saboteurs, and 
subversives trying to infiltrate friendly lines. 

(1) Coordination. Planning for these screen- 
ing operations is accomplished, as far as possible, 
in conj unction with the following elements : 

(a.) Combat commander. The commander 
is concerned with channelizing refugees and pris- 
oners of war through his area of operations, par- 
ticularly in the attack, to prevent any impedi- 
ments to his unit’s movement, or any adverse ef- 
fect on the unit’s mission. 

( b ) Military Police (MP). MP elements 
are responsible for the control and evacuation of 
prisoners of war and refugees through the differ- 
ent echelons. 

(c) Civil Affairs (CA). CA elements, 
under the G5, are responsible for the proper dis- 
position of refugees and prisoners of war. 

(d) Psychological Operations ( PSYOP ). 
PSYOP elements, under the G5, contribute to 
screening operations by informing the refugees 
of the need for their displacement. They also as- 
sist the MP in maintaining control. 

(e) Civil authorities. Civil authorities are 
included in planning only if control has been re- 
turned to them. 

(2) Preparation. 

(a) Before any screening operation, the 
Cl teams involved should become intimately fa- 
miliar with all available information on indica- 
tors as covered in paragraph 12-lle, as well as 
the following: 

1. Regulations in the enemy area. To 
have any success, Cl personnel must become fa- 
miliar with all restrictions placed on the civilian 
population within the enemy-held area, to include 
curfews, travel restrictions, rationing, draft or 
conscription regulations, mobilization orders for 
civilian labor forces, required political organiza- 
tional memberships, etc. Knowledge of these reg- 
ulations may help the Cl screener to detect dis- 
crepancies, discern changes in enemy activity, 
and maintain control. 

2. Enemy intelliegnce, political infra- 
structure and organizations. In order to identify 
agents of the enemy intelligence or infrastructure 



apparatus, Cl personnel must be thoroughly con- 
versant with their methods of operation, policies, 
objectives, offices and suboffices, schools, officials, 
and known agents. 

3. Enemy order-of -battle (OB). Every 
member of the Cl team should know which units 
of the enemy his unit is facing and which units 
are in its area of operations. He should be aware 
of their disposition, strength, weaknesses, compo- 
sition, training, equipment, activities, history, 
personalities, and commanders. Current OB in- 
formation should be maintained by the team for 
possible exploitation of prisoners of war and for 
assistance to OB analysts. Counterintelligence 
personnel are not OB interrogators but they must 
be capable of expeditiously recognizing, detect- 
ing, exploiting and reporting tactical and OB 
data. 

-4. Enemy-held area. Cl personnel 
should also become familiar with the area in 
which they are operating; particularly geogra- 
phy, landmarks, distances, and travel conditions. 
Knowledge of such pertinent information as the 
political, social and economic traditions, customs 
and racial problems of the area is essential. 

(b) Black lists and information sheets 
listing indicators of Cl interest should be distrib- 
uted to the troops, MP, or other personnel assist- 
ing with the screening operation. A form should 
be made up and passed out to the individuals to 
be screened requiring them to record personal 
data. This form will aid in formulating the type 
of questions to be asked and in determining the 
informational areas needed to fulfill EEI or OIR, 
The following data, plus anything else deemed 
pertinent, should be included on the form : 

1. Full name, other names, date and 
place of birth, current and permanent residences, 
and current citizenship of the individual. 

2. The same information as above con- 
cerning the father, mother, and siblings, includ- 
ing the occupation and whereabouts of each. 

3. If married, the names of spouse (in- 
cluding female maiden name), date and place of 
birth, nationality, occupation and personal data 
on spouse’s family. 

U. The individual’s education and 
knowledge of languages. 

5. Details of the individual’s career to 
include schools, military service, technical and 
professional qualifications, political affiliations 
and countries visited. 

6. Point of departure, destination and 

purpose. 
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(3) Initial screening. Prisoners of war and 
refugees enter prisoner of war and refugee 
streams rearward at the forward edge of the bat- 
tle area (FEBA) where the troops channelize 
them after a search for weapons and documents. 
(Fig 12-1 depicts the prisoner of war and refu- 
gee flow. ) Couriers, walking wounded, and empty 
trucks or convoys traveling rearward toward the 
brigade control points can be used as guards 
and/or transport for the prisoners of war and re- 
fugees. At this point MP will take custody and 
responsibility for the prisoners of war and refu- 
gees, and initial Cl screening will take place. 
This will consist of, as a minimum, interrogation 
by intelligence interrogation personnel. These 
personnel will refer suspects to the Cl team for 
further interrogations and possible detention. At 
this level, suspects are separated from the pris- 
oner of war and refugee streams, exploited if pos- 
sible, and evacuated to division by MP. Detained 
prisoners of war and refugees will be interro- 
gated, further exploited at division prisoner of 
war collecting points or civilian detention cen- 
ters, and then evacuated to field army civilian de- 
tention centers or prisoner of war cages for de- 
tailed interrogation and exploitation, if applica- 
ble. Those refugees found to be innocent of any 
wrongdoing will be rerouted to the civilian as- 
sembly areas. Those prisoners of war and refu- 
geees not detained will follow the refugee flow to 
the division control points where more detailed 
Cl screening is conducted similar to that system 
at brigade. Those not detained will be collected 
and routed to the field army civilian assembly 
area or prisoner of war cage. 

(4) Conduct of screening. Since it is impos- 
sible to interrogate everyone because of time and 
the usually large number of people to be interro- 
gated, civilians moving about the combat area 
have to be subjected to brief inquiries on a selec- 
tive basis by MI, CA, PSYOP, and MP personnel. 
Such brief inquiries are designed to locate and 
separate suspicious persons from the masses and 
should be thought of as a preliminary interroga- 
tion. These selected persons are detained for fur- 
ther Cl interrogation. If the interrogee is to be 
referred to a rear echelon for the detailed inter- 
rogation, a preliminary interrogation report 
(PIR) is furnished the MP who accompanies the 
interrogee to the rear. The MP will take both the 
detainee and the PIR to the next echelon Cl team. 
The mechanics of this referral procedure will be 
a matter of operational orientation. Personnel 
who conduct the detailed interrogations at rear 
area interrogation centers will not be the same as 



those who conduct the preliminary or screening 
interrogations. The PIR, therefore, should reflect 
as much data as possible under these four head- 
ings: 

(а) Identity. Persons should be searched 
for possible identifying documents in the form of 
ID cards, ration cards, draft cards, driver’s li- 
cense, auto registration, travel documents, pass- 
port, and the like. If a man is, or has been, a sol- 
dier, his rank, service number, and unit should be 
recorded. All this information can be checked 
against the form previously filled out by the in- 
terrogee. 

(б) Background. The use of the form will 
aid in obtaining the information required; how- 
ever, certain informational areas on the forms 
will have to be clarified, especially if data indi- 
cate a suspect category or the person’s knowl- 
edgeability of intelligence information. 

(c) Recent activities. The activities of an 
individual during the days prior to his detain- 
ment or capture should be examined. What was 
he doing to make a living? What connection, if 
any, has he had with the enemy? Why was he in 
the area? This line of questioning may bring out 
particular skills such as those associated with a 
radio operator, linguist, photographer, etc. Physi- 
cal checks can be made of certain types of cal- 
louses, bruises, or stains to corroborate or dis- 
prove his story. Sometimes soil on shoes will not 
match that from the area he claims to have come 
from. 

(d) Journey or escape route. Cl personnel 
should determine the route the individual took to 
get to US lines or the checkpoint. The individual 
should be further questioned closely on time, dis- 
tance, and method of travel so that the screener 
will be allowed the opportunity to quickly calcu- 
late whether or not the trip was feasible during 
the period of time stated and with the mode of 
transportation used. Discrepancies in travel time 
and distances can be the key to the discovery of 
an infiltrator whose cover story is very shallow. 
By ascertaining what an individual observed en 
route, the screener can either check the person’s 
story or pick up intelligence informatibn concern- 
ing the enemy forces. 

(5) Indicators. The following indicators can 
be used in an attempt to identify hostile infiltra- 
tors. 

(а) Persons of military age. 

(б) Persons traveling alone or in pairs. 

(c) Persons without identification. 

(d) Persons with unusual documents. 
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Figure 12—1. Channelizing of prisoners of war and refugees. 
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(e) Persons possessing large amounts of 
money, precious metals, or gems. 

(/) Persons displaying any peculiar activ- 
ity. 

(g) Persons trying to avoid detection or 
questioning. 

( h ) Persons using enemy MO. 

( i ) Persons having a pro-enemy back- 
ground. 

O') Persons with a suspicious story. 

( k ) Persons with a family in enemy 

areas. 

(l) Persons with a technical skill or spe- 
cial knowledge. 

(m) Persons who have collaborated. 

( n ) Persons who violate regulations in 
enemy areas. 

(6) Other screening methods. In addition to 
interrogation, the following methods of screening 
prisoners of war and refugees can be used. 

(a) Black, grey, and white lists. 

(b) Low-level informants inserted into 
the prisoner of war or refugee screens, cages, or 
centers. 

(c) Sound equipment placed in suspect 
holding areas or cages. 

( d ) Polygraph examinations. 

( e ) Specialized identification equipment, 
e.g., metal-trace detection kit. 

c. Mobile and, Static Checkpoints. This type of 
Cl screening requires that counterintelligence 
personnel prepare black and grey lists, indica- 
tors, and some specialized equipment such as 
metal detection kits to be used by screening 
teams. These teams will provide the initial 
screening and will detain and refer suspects to 
the MI control element for detailed interrogation 
and possible exploitation. 

(1) Screening teams can be made up of com- 
bat troops, military police, civil affairs, intellig- 
ence interrogators, counterintelligence agents, or 
any mix thereof. 

(2) Checkpoints are placed at strategic loca- 
tions where there is sufficient space for assem- 
bling people under guard and for parking vehi- 
cles for search and investigation and are set up 
ideally as shown in figure 12-2 as either mobile 
or static missions. Local security must be posted 
to protect the checkpoint and a sufficient amount 
of personnel must also be posted to the front and 
rear to apprehend anyone attempting to avoid 
the checkpoint. 

(a) A mobile checkpoint can be used as a 
moving system whereby the team, either mounted 



or on foot, briefly selects individuals at random 
or systematically, e.g., every fifth person, to be 
stopped and questioned. These checkpoints could 
be located at various points for periods not to ex- 
ceed 1 day. 

(6) Static checkpoints are those manned 
permanently by MP or troops at the entrance to a 
brigade, town gate, river crossing, or similar stra- 
tegic point. 

(3) Mobile and static checkpoints are used 
by counterintelligence to : 

(a) Detect and prevent enemy infiltration 
of espionage, sabotage, or subversive agents into 
the area. 

( b ) Gather information of immediate in- 
telligence value, both tactical and counterintel- 
ligence, from refugees and other persons from 
enemy-controlled areas. 

( c ) Gather other information not other- 
wise available to intelligence units. 

(4) The preparation needed for static and 
mobile checkpoints is identical to other screening 
operations, and the indicators will remain basi- 
cally the same. 

d. Port and Harbor Security. Port and harbor 
security normally is conducted jointly between 
the MP and MI units assigned to the logistical 
command under which the port is operated. 
Counterintelligence elements normally will con- 
centrate their efforts in the following areas : 

(1) Special operations. Those special opera- 
tions described in FM 30-17A, the classified sup- 
plement to this manual, will be targeted against 
the surrounding and internal areas with special 
emphasis on hostile sabotage and subversion ele- 
ments. 

(2) Physical security. Normal Cl procedures 
will be established for port and harbor areas as 
are set forth for installations, except that con- 
trols must also be established for ships and crews 
in port, particularly those under a foreign flag. 

e. Border Security. Border Security is con- 
ducted by Cl element to minimize infiltration of 
men and supplies into the area of operations — 
particularly hostile intelligence or elements 
which will engage in sabotage and subversive ac- 
tivities against the friendly war effort. To accom- 
plish this, Cl elements must determine hostile 
methods of operation to establish indicators and 
must determine infiltration and exfiltration points 
to successfully capture or neutralize infiltration. 
The indicators will be furnished those friendly 
elements in contact with the border areas, and to 
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other MI elements. In addition the friendly mili- 
tary forces, to include MP and CA elements, may 
utilize those indicators received from the inter- 
ception of radio communications when conducting 
border surveillance and making documentation 
checks at mobile and static checkpoints (c) 
above). Other MI units can make use of the indi- 



cators when engaged in aerial surveillance or 
image interpretation missions. Information thus 
received can go into planning for neutralization 
and exploitation operations, or use of detection 
powders at possible infiltration points as well as 
interrogation of border area residents and travel- 
ers. 
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CHAPTER 13 

STABILITY OPERATIONS 



Section I. INTRODUCTION 



13—1. General 

a. To fully understand the counterintelligence 
problems and the application of counterintel- 
ligence techniques and procedures in stability op- 
erations, counterintelligence personnel must be 
thoroughly acquainted with insurgency, its 
causes and characteristics, and the peculiarities 
of US Forces employment in insurgency areas. 
FM 30-31, FM 30-31A, and FM 31-23 should be 
studied as background for the issues covered 
here. 

b. The normal counterintelligence functions of 
routine security investigations and services are 
performed in much the same way as they are in a 
conventional tactical situation. The basic respon- 
sibilities of Cl elements and personnel in an in- 
surgency area are the denial of intelligence infor- 
mation to the insurgent force and the identifica- 
tion and neutralization of the insurgent infra- 
structure. Particular emphasis should be placed 
upon the intelligence apparatus. Counterintel- 
ligence operations must not only provide security 
against espionage, subversion, sabotage, and ter- 
rorism, but they must include the collection of in- 
formation on the insurgents, their organizations, 
and their activities. Detailed information on the 
insurgent intelligence apparatus, methods of op- 
eration, targets, and capabilities is required as a 
basis for Cl planning and the conduct of an effec- 
tive security program. In addition, this planning 
can be used for future tactical missions by com- 
bat units to neutralize Cl targets. 

c. If the insurgency is dominated by a Com- 
munist regime, a study of the political apparatus 
must also be made since the philosophy that the 
military exists only as an extension of the politi- 
cal arm, and is subordinate to it, will dominate 
the insurgency. Such a study, if it is continuous, 
may yield information more revealing than a 
study of only the military aspects of an insur- 
gency or it may become the key to future opera- 
tions, missions, or goals set for the military by 



the overriding consideration set by the political 
arm. A discussion of such a study is contained in 
FM 30-17 A, the classified supplement to the man- 
ual. 

d. To accomplish security objectives, the Cl ef- 
fort in the following areas must be stressed : 

(1) Denial of all information (classified or 
otherwise) to the insurgents by devising security 
controls to prevent breaches. 

(2) Formulating and planning security 
training programs and implementing security 
controls. 

(3) Detection, investigation, and elimination 
of security breaches and weaknesses. 

(4) Detection, identification, and neutraliza- 
tion or destruction of hostile intelligence, subver- 
sive, sabotage, and terrorist elements and activi- 
ties. 

(5) Monitoring the populace and activities 
in the area of operation for indications of threats 
to the security of US/host country activities. 

e. The police, in the course of investigating 
crimes and conducting police law and order oper- 
ations, may be the first government agency to de- 
tect evidence of an insurgency. Police intelligence 
can provide significant information through MI 
channels and command intelligence for counterin- 
surgency operations. Intelligence collection guide- 
lines for police and MI agencies should be ex- 
changed in the preconflict environment of the 
first phase of an insurgent threat to assure the 
timely provision of police intelligence to MI and 
Cl agencies and civil intelligence agencies respon- 
sible for detection, surveillance, and penetration 
of insurgent organizations. 

13—2. Jurisdiction and Responsibility 

Counterintelligence measures normally will have 
been carried out by agencies of the host country 
prior to arrival of US Forces in the country. US 
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Army Cl elements, as part of the US Forces, will 
arrive in the host country by request .or mv 
tion. Counterintelligence activities of US person 
nel may be limited to training, advising, and sup 



porting the host country counterintelhgenc 
security services. However, with the participation 
of US Forces in stability operations, the normal 
Cl support of these forces must be provided. 



Section II. COUNTERINTELLIGENCE OPERATIONS 



13-3. Personnel Security Operations 

Personnel security investigations will ^ con- 
ducted in accordance with this manual and AR 
381-130. Security investigations of local nation- 
als involve additional problems. 

a. Subjects may be from Communist- or insur- 
eent-controlled areas, within or outside the hos 
country where investigation cannot be conducted. 
Spe”w notice must be taken of a subject s listed 
residences to determine if they were or are m in- 
surgent-controlled areas. 

b There may be an absence of reliable and 
current records of all types, particular^ m newly 
emerging nations, thus reducing the effectiveness 
of background investigation. 

c In most instances, host country intelligence 

and security agencies, which may £ 
by the insurgents, will be responsible for investi 
gating and clearing local personnel ; capabilities 
of local agencies will vary from excellent to non- 
existent. 

d The volume of clearance actions on local na- 
tionals (military, cooks, maids, fivers interpret- 
ers laborers) who have frequent access to US in 
stallations and the probability of h muted l ^son- 
nel for conducting background investigations 
mav dictate the necessity for limiting the scope of 
investigations. Employment of toed 
discouraged for security reasons, 
essary should be kept to a minimum. Under these 
conditions, steps may be taken to Prevent und^ 
risk One step is to obtain the specific indorse 
ment of the loyalty of a subject by penoM whos 
loyalty and reliability have already been estab 
lished (the “guarantor system”). 



] 3 _ 4 , Security of Information 

a. US Army activities involve daily contact 
with host country personnel over whom U 
Forces exercise no security control. This unavo d^ 
able security risk must be balanced with stmt se 
curity discipline and effective application of basic 
principles of safeguarding military information. 

b. The difficulty in distinguishing between 



friendly and insurgent elements among the host 
country populace magnifies the problem of loose 
talk.” Loose and careless discussion of unclass 
fied military information presents an even 
greater problem inasmuch as the absence of a 
curity Classification gives free license to discus- 
sion Cuch unclassified bits of information in the 
hands of insurgents lead to ambushes surprise 
S and acts* terrorism. The secuntyjam- 
ing and education of troops must stress that dis 
closure of unclassified information may 
dangerously detrimental as disclosure of classi- 
fied information. The indigenous employees of US 
Forces facilitate the insurgent’s acquisition of in- 
on our activities, both military and 

personal. 

c Measures which screen the staging, group 
in*; X, for, and planning of military actions 
from the observation of the insurgent 
population are extremely important- 
be warned against patterns o con They 

veal the tactical intentions of their vm*. They 
must be reminded that the populace , u > the : pn 
mary source of intelligence .nformation tor the 
insurgents. Counterintelligence personnel mu 
learn to distinguish what patterns of conduct are 
used by the insurgent as indicators and P 
report these indicators to the responsible com- 

mand. 

13-5. Physical Security 

a. The effective protection ofmiliteryinstel 1 ^ 
tions, personnel, and activities from the > threat of 
espionage and sabotage is based on security mea 
sures implemented and practiced as a re » u ^ of ^ 
surveys and inspections and the physical security 

surveys conducted by the MP. ^untennte hgen e 

surveys provide recommendations on security 
measures designed to fit specific installations, fa- 
cilities, or activities. A checklist for conductmg 
TI surveys is contained in appendix D. A checK 
list for conducting physical security 
contained in FM 19-30. In all surveys, particular 
emphasis should be given to a check of . 

(1) The natural topographic features exist- 
ing at the periphery of the installation to deter- 
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mine whether they afford direct observation into 
the installation, afford a concealed or covered 
path of approach into the installation, or other- 
wise adversely affect the security of the installa- 
tion. 

(2) Organizations (political, labor, frater- 
nal, social) in the area which may present a se- 
curity threat. 

(3) Places of entertainment (bars, restaur- 
ants, night clubs) in proximity of the installation 
to determine whether there have been or may be 
attempts to solicit information from the soldiers. 

b. Periodic Cl inspections must be conducted at 
great frequency in an insurgency environment. 
Close attention must be given to : 

(1) Close examination of the defensive sys- 
tem to insure that every possible means of access 
or path of approach has been considered in estab- 
lishing the physical perimeter security. Particu- 
lar attention must be given to culverts, gulleys, 
and streambeds which could provide means of ac- 
cess to guarded areas. 

(2) Designation of all sensitive areas of the 
installation as restricted areas and posting of 
“off-limits” signs in both English and the local 
language. Access to restricted areas by local hire 
personnel such as janitors, cooks, guards, trans- 
lators, and clerks should be prohibited or permit- 
ted only when properly escorted by authorized 
personnel. It may be advisable to conduct periodic 
technical inspections of restricted areas to pre- 
clude or detect the presence of electronic listen- 
ing devices which may be planted by opposition 
elements. Additionally, the periodic shifting of 
key installation locations, e.g., command post, 
radio room, will aid overall security. 

(3) A strict visitor control system for han- 
dling the constant security threat posed by the 
presence of laborers, local tradesmen, and rela- 
tives of camp personnel. Security considerations 
may dictate making the entire base area a res- 
tricted area into which no civilians are allowed. 
Laborers should be closely checked and prevented 
from loitering near sensitive areas. 

(4) The location of sanitary fills, washing 
areas, and other troop-associated facilities. Wher- 
ever possible, such facilities should be within the 
cantonment. 

c. A unit security SOP must be prepared at all 
echelons, and all members of the unit must be fa- 
miliar with established security procedures and 
practices. As a minimum, a security SOP must 
provide for: 



(1) Duty details for emergency conditions. 

(2) Immediate availability of adequate wea- 
pons and munitions for immediate defense of the 
installation. 

(3) An installation warning system to sound 
the alert. 

(4) Defense plans indicating posts for all 
members in the event of an assault, and a fire 
plan for all weapons. 

(5) Liaison with local security organizations 
and tactical units to provide support in case of at- 
tack, to include such items as a prearranged fire 
support plan by artillery elements. 

(6) Emergency destruction plan for defense 
information and equipment. 

(7) Security discipline and standards of con- 
duct to be observed. 

(8) Duties of security guards and patrol ar- 
rangements indicating frequent changes of tim- 
ing and methods of patrolling, location of guard 
posts, and changing of the guards. No discernible 
pattern in time or method should be established. 

d. All security measures should be viewed and 
undertaken with the knowledge that in stability 
operations there is no rear area ; the enemy is on 
all sides. 

13-6. Populace and Resources Control 

a. A significant factor in stability operations is 
the implementation of measures to watch and 
control the movement channels and patterns nec- 
essary for support, communication, and opera- 
tions of insurgent forces. Prior to implementation 
of any control measures, a public information 
program must be initiated to inform the popula- 
tion of the reason for the controls. Imposition of 
excessive or unnecessary restrictions on move- 
ment will result in the buildup of a strong resist- 
ance from the people and should be avoided. To 
the maximum extent possible, populace and re- 
sources control should be implemented and per- 
formed by host country agencies. This is a matter 
of practicality, but there are also legal and psy- 
chological implications. US Army counterintel- 
ligence specialists should participate in the plan- 
ning stage of a populace and resources control 
program and provide advice and assistance to the 
host country. 

b. Some examples of populace control tech- 
niques are: 

(1) Nation-wide registry and issuance of 
identification cards to all residents and supple- 
mental family registration program. 
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(2) Division of communities or areas into 
blocks with appointed, trusted, and loyal resi- 
dents as block leaders to report on insurgent ac- 
tivities. 

(3) Use of police patrols to detect sources of 
insurgent support, insurgent sympathizers, and 
routes used by insurgents. 

(4) Establishment of checkpoints to screen 
and control movement of individuals into and out 
of zones of operation or other specified areas. 

(5) Employment of travel restrictions to de- 
tect violators and nonlocal residents; frequent 
change of restrictions and travel bans at certain 
hours of the day. 

(6) A well regulated and controlled curfew 
should be employed during hours of darkness to 
reduce terrorist and sapper attacks. 

(7) Censorship. 

(8) Prevention of illegal political meetings 
and rallies. 

(9) Search operations are conducted to clear 
a built-up area, search watercraft, apprehend 
guerrillas, and seize illegal arms, communication 
means, medicines, and other items of a critical 
nature. A search operation is conducted as a 
preventive measure against the accumulation of 
critical items by the population, the harboring of 
insurgents, and in accomplishing administrative 
control measures previously established. 

(10) Block control ( para h below) . 

c. Some examples of resources control tech- 
niques are: 

(1) Control of production, storage, and dis- 
tribution of foodstuffs, and protection of food- 
producing areas. 

(2) Control of the possession of arms, am- 
munition, demolitions, drugs, medicine, and 
money. 

(3) Decreeing the possession of such chemi- 
cal combinations as arsenic sulfate and potassium 
chlorate, which create explosives, as illegal with- 
out a special permit. 

(4) Control of certain imports, e.g., 82mm 
pipe which can be converted into mortars while 
permitting import of other pipes, i.e., 77mm con- 
struction pipe. 

d. In stability operations, border or frontier 
control must be an integral part of the populace 
and resources control program. Border control 
measures can prevent or impede the movement of 



insurgents into a bordering country for sanctuary 
and also restrict materiel and manpower support 
to the insurgents. Prior to implementation of con- 
trol measures, a thorough study and analysis is 
made of the terrain, vegetation, and human envi- 
ronment along the border areas. Factors to consi- 
der are the activities, intents, and haunts of bor- 
der residents, illegal border crossers, and smug- 
glers and the locations of natural geographic fea- 
tures which are impediments to human travel. 

e. Of primary concern to Cl elements involved 
in border or frontier control during stability op- 
erations is the infiltration of hostile sabotage, es- 
pionage, and subversive elements into and out of 
the host country. This infiltration can be by sea, 
land or air. These routes must be detected and 
neutralized. The following EEI frequently will be 
standard in border or frontier control : 

(1) Infiltration-point locations. 

(2) Exfiltration-point locations. 

(3) Methods of operation. 

(4) Indicators of hostile infiltration/exfil- 
tration. 

/. In planning for implementation of a border 
control operation, the following points should be 
covered : 

(1) Location of authorized road and rail 
crossing points along the frontier. 

(2) Establishment of frontier control points 
to determine identities of persons attempting to 
enter or leave and to check their documents. 

(3) Provision to apprehend anyone attempt- 
ing to evade control restrictions. 

(4) Control of frontier area residents. 

(5) Provisions for interrogation and disposi- 
tion of apprehended suspects. 

(6) Security control of refugees and dis- 
placed persons attempting to cross the frontier. 

(7) Liaison with border control authorities 
of neighboring countries, if they are friendly. 

(8) Mobile and static checkpoints. 

(9) Neutralization and exploitation opera- 
tions. 

(10) Travel permits. 

(11) Documentation checks. 

(12) Imagery interpretation reports on possi- 
ble infiltration/exfiltration points. 

(13) Restricted zones enforced by air strikes/ 
artillery fires. 
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(14) Detection powders laid on possible infil- 
tration points. 

(15) Surveillance, to include use of illumina- 
tion, radars, night vision devices, and ground sen- 
sors. 

(16) Special operations, as discussed in FM 
30-17A. 

(17) Other intelligence, as acquired. 

g. Resources control measures are necessary to 
impede or prevent the flow of food, supplies, and 
materiel to the insurgents. Insurgents are depen- 
dent primarily upon the local populace for logis- 
tical support; therefore, regulatory or restrictive 
measures (rationing of critical supplies) to pre- 
clude surpluses will affect the availability of 
these items of the insurgent. Planning must in- 
clude provision for disposal of scraps, waste, and 
unserviceable equipment and supplies to prevent 
utilization by the insurgents. 

h. Block control is the constant surveillance 
and reporting of activities within a block or other 
small, populated area by a resident who has been 
appointed and is supervised by an appropriate au- 
thority in the host country. Block control is one 



of the most effective and economical means of po- 
pulace and resources control; however, the sys- 
tem takes considerable time to establish and, by 
its nature, operates more effectively under civil 
authority than under military control. 

(1) Block control is instituted by dividing 
each block (or area) in zones, each of which in- 
cludes all the buildings on one side of a street 
within a block. A zone leader is appointed from 
among the residents for each zone, and a separate 
block leader is appointed for each block. Zone 
leaders report to block leaders all movements, to 
include arrivals and departures. The block leader 
reports periodically to the military commander or 
civil authority on all movements within his block. 
Unusual activities are reported immediately. 

(2) If the loyalty of the zone and block 
leaders is questionable, informants may be lo- 
cated throughout the area as an effective check 
on their operations. 

1 3-7. Special Operations 

Counterintelligence special operations in stability 
operations are discussed in the supplement to this 
manual, FM 30-17A, and in FM 30-31A. 



Section III. OPERATIONAL TECHNIQUES AND PROCEDURES 



13—8. General 

The basic Cl techniques and procedures discussed 
in this manual and its supplement, FM 30-17A, 
are generally applicable in an insurgency envi- 
ronment. Requirements for highly technical in- 
vestigative equipment are less than normal. Some 
modifications or adaptations of techniques and 
procedures are necessary. 

13-9. Counterintelligence Coverage 

In stability operations, Cl coverage resembles 
that coverage as described in chapter 12, Conven- 
tional Combat Operations, in that area and tacti- 
cal coverage is again used. The differences will be 
that tactical MI companies are responsible for 
that area of influence around its tactical area of 
responsibility (TAOR). Area coverage will over- 
lap the TAOR primarily for strategic type cover- 
age. Normally, too, Cl elements will not have any 
investigative jurisdiction over indigenous civil- 
ians or US citizens in the supported nation. The 
area coverage elements normally will be given 
advisory duties in addition to the normal mission 
of area coverage. 



13-10. Base Camp or Installation Security 

Base camp or installation security in stability op- 
erations should involve defensive and offensive 
measures. Since defensive measures alone will 
tend to play into the insurgent’s strategy, the ini- 
tiative is usually the enemy’s in an insurgency, 
therefore, both types must be employed. Some of 
these measures can be taken from paragraph 
12-5, which pertains to rear area security in a 
conventional war situation, but others and either 
not mentioned in detail or are conducted differ- 
ently in an insurgency. 

a. Defensive Measures. In conjunction with 
other agencies, primarily the MPs, the five basic 
areas of base camp or installation defense are 
those concerned with physical security as listed 
below. 

(1) Security forces. Counterintelligence in- 
terest in the security forces of an installation, 
compound or activity is the proper clearance of 
indigenous employees. 

(2) Detection measures. While this area is 
basically an MP responsibility, since it involves 
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the use and deployment of sentry dogs, night vi- 
sion devices, anti-intrusion devices, and alarm 
systems to list a few, counterintelligence person- 
nel qualified in the DAME, DASE, and photo- 
graphic specialities can be of assistance to any 
MP element without this specialized training. 

(3) Internal security measures. Counterin- 
telligence must assume the greater responsibility 
for education in the area of internal security 
measures. SAEDA lectures in conjunction with 
MP classes on other aspects of security such as 
fire prevention, arms control, and safety, will 
take up most of this aspect of physical security. 

(4) Perimeter measures. A prime MP area, 
perimeter measures consists of advice to the com- 
mander on such things as outer perimeter patrol- 
ling, barriers, protective lighting, and clear zone. 
Counterintelligence and police intelligence infor- 
mant nets near and within the activity, when pro- 
perly integrated, will also be needed for proper 
protection of the installation. 

(5) Control measures. This widely overlap- 
ping area is shared by counterintelligence with 
the MP element, and includes such measures as 
population control in and around the activity; ve- 
hicular, personnel and package control into the 
activity; and restricted areas. 

b. Offensive Measures. The primary objective 
should be the identification and neutralization of 
specific members of the insurgent infrastructure 
through systematic intelligence collection and 
analysis with complete documentation concerning 
the activities of each individual. The ultimate ob- 
jective being to allow the host country to prove 
the individual’s illegal activity once he is appre- 
hended. This will require that Cl personnel work 
very closely with host country agencies. Liaison 
and exchange of information with the area coor- 
dination centers, if they have been established ; or 
with the civilian police, military and civilian in- 
telligence agencies in absolutely necessary to in- 
sure that offensive Cl measures are completely 
effective. Since the host country agencies will 
have the prime responsibility for identification 
and neutralization of the infrastructure, US Cl 
activities should complement those of the host 
country. Cl personnel should be the focal point 
for exchange of information concerning the in- 
frastructure, between the US units and host 
country organizations. 

(1) HUMINT, as discussed in FM 30-17A 
and FM 30-31 A should be used offensively. 

(2) Mobile checkpoints as discussed in para- 



graphs 12-15 and 12-16 is a type of offensive Cl 
measure. 

(3) Cordon and search operations. 

(a) General. In stability operations, cor- 
don and search operations may be employed to 
ferret out the insurgent infrastructure as well as 
individual unit elements which may use a com- 
munity or area as cover for their activities and/or 
as a support base. These operations should be 
conducted in conjunction with host country forces 
and organizations, not as unilateral US efforts. 
Ideally US Forces, to include Cl personnel, 
should provide support and the entire operation 
should be directed by a host country official. Host 
country personnel should, as a minimum, be part 
of the screening and sweep elements on any cor- 
don and search operation. 

( b ) Preparation. Before conducting a com- 
munity or area cordon and search operation, 
counterintelligence personnel must: 

1. Coordinate with local officials to so- 
licit their support and cooperation in the opera- 
tion. 

2. Coordinate with the host country area 
coordination center, if established, or if not, the 
host country intelligence and police organiza- 
tions : To obtain their participation in the opera- 
tion; to update existing black and gray lists; to 
arrange to have insurgent defectors, agents, and 
other knowledgeable personnel present to iden- 
tify insurgents and their supporters; to update 
all intelligence on the community or area. 

3. Coordinate with US and host country 
CA and psychological warfare teams for enter- 
tainment and civic services. 

U. Coordinate with the unit commanders 
who will be involved in the operation for details 
on the conduct of the operations. 

5. Update all intelligence on the com- 
munity or area. 

(c) Conduct of the operation. The senior 
tactical unit commander will be the individual 
responsible for the conduct of the operation. He 
will plan, with advice from Cl, CA, and psychol- 
ogical warfare personnel, the cordon, which is 
usually deployed at night, and the search, which 
normally begins at first light. 

1. The basic operation is the community 
cordon and search operation (fig 13-1). As the 
collection/screening station (fig 13-2) is set up by 
the screening element, the sweep element escorts 
the residents toward the collection/screening sta- 
tion, leaving behind one resident to care for fam- 
ily belongings, if required by law. The search ele- 
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ment follows behind the sweep element searching 
houses, storage areas, cemeteries, etc., with dogs 
and metal detection equipment, if available. Each 
search element should include an interrogator 
with a blacklist to screen persons left behind 
to watch family belongings. In the collection/ 
screening station, the residents are brought 
to the collection area (or holding area) and 
then systematically led to specific screening 
stations. En route to the screening station, each 
individual will be searched for weapons and will 
pass by the mayor or community leader, enemy 
defectors or cooperating prisoners hidden from 
view so that they can uncompromisingly identify 



any immediately recognizable enemy. These in- 
formants will be provided with a means by which 
to notify a nearby guard or a screener of the 
spotted enemy member who will be immediately 
segregated and interrogated. At the specific 
screening stations the residents will be asked for 
identification, checked against blacklists, 
searched for incriminating evidence or “body- 
marks” or, if available, checked by electronic 
equipment. If found suspect or guilty of enemy 
activity, persons are moved on for photograph- 
ing, further interrogation or put in the screening 
area detection point to be taken back to a base 
area or area coordination center interrogation fa- 
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Figure 13-1. Community cordon and search. 
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Figure 1 8 - 2 . Collection/ screening station. 
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cility for detailed interrogation upon completion 
of the operation. Innocent residents are passed 
through to the post screening area where they 
are provided medical assistance and other civic 
assistance, as well as entertainment and friendly 
propaganda. Any persons caught attempting to 
escape or break through the cordon are immedi- 
ately returned to the detention area. When the 
operation is terminated, all innocent individuals 
are allowed to return to their homes and the 
enemy suspects are removed under guard for fur- 
ther interrogation. All members of the commun- 
ity will be photographed for compilation of a vil- 
lage packet, (see FM 30-17 A) which will be used 
in future operations. 

2. The second type of cordon and search 
operation is very frequently referred to as the 
“soft” or area cordon and search. This operation 
includes the cordoning and searching of a rather 
vast area, for example, a village area incorporat- 
ing a number of hamlets, boroughs, towns, or vil- 
lages which are subdivisions of a political area 
beneath county level. This type of operation re- 
quires a multibattalion military force to cordon 
off the area, a pooling of all paramilitary, police, 
CA and intelligence resources to conduct search 
and screening, and a formidable logistical 
backup. This kind of operation extends over a pe- 
riod of days and may take as long as a week or 
possibly longer. It will generally appear as illus- 
trated in figure 13-3. While screening and search 
teams systematically go from community to com- 
munity within the area and screen all residents, 
military forces sweep the area outside the com- 
munities over and over again to seek out anyone 
avoiding screening. As each resident is screened, 
counterintelligence agents will insure documents 
testifying to the fact that he was screened and, if 
necessary, allowing him restricted travel within 
the area. Other population and resources control 
measures are used as well, and such an opportu- 
nity may allow the chance to issue new ID cards 
and photograph all of each hamlet’s residents. 
As each community screening proceeds, individu- 
als who were designated for further interroga- 
tion are sent to an interrogation center set up at 
a centralized point in the cordoned area where Cl 
personnel will work with intelligence interroga- 
tion personnel, both US and indigenous, and with 
police and other security service interrogators. 
Besides field files and other expedient facilities, 
located at the interrogation center is a quick 
reaction force ready to react immediately to intel- 
ligence developed during the interrogations and 
from informants planted among detainees. 



(4) Neutralization operations, as discussed 
in paragraph 12-10, chapter 12, is another offen- 
sive Cl measure. 

(5) Raids and searches. 

(6) Planned tactical interception (ambush). 

(7) Traps. 

1 3-1 1 . Indigenous Support Personnel 

a. The language communication barrier in most 
nations with potential insurgency is a major han- 
dicap to Cl operations. The employment of indig- 
enous personnel with English language ability 
will be essential. These persons will serve not 
only as interpreters but as intermediaries in con- 
tacting and developing sources of information. To 
minimize the security risks involved in employ- 
ment of indigenous personnel, the following pre- 
cautionary measures must be considered : 

(1) Employment of indigenous personnel 
who are members of the host country military or 
police services. 

(2) Quartering and messing of indigenous 
employees within the US base area for purposes 
of activity and movement control. 

(3) Use of polygraph examination for initial 
pre-employment check and periodic re-examina- 
tion. 

b. In many cases, it will be difficult to find 
enough indigenous personnel who are proficient 
in the English language. To avoid misunderstan- 
ding or misinterpretation caused by limited lan- 
guage proficiency, US counterintelligence person- 
nel and indigenous personnel must work as teams 
with the US personnel providing the professional 
guidance and direction. Reports from indigenous 
personnel must be closely scrutinized for reliabil- 
ity and accuracy of content. Obscure points must 
be questioned to insure accuracy. Sociological fac- 
tors must be considered to determine the extent 
to which ties of blood, race, language, locality, re- 
ligion, or tradition may affect the substance of 
translated information. 

1 3—1 2. Pattern Analysis 

A discussion on methods of pattern analysis on 
insurgent groups is contained in FM 30-17A, the 
classified supplement to this manual. 

13—13. Records and Files 

a. Principal sources of information for counter- 
intelligence personnel in stability operations are 
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Figure 18S. Area cordon and search. 




13-10 






FM 30-17 



the documents and records maintained by the 
host government offices and civilian organiza- 
tions. One of the initial tasks of counterintel- 
ligence personnel in an insurgency area is locat- 
ing, gaining access to, and establishing continu- 
ing access to the documentary sources available. 
Generally, the records maintained in the newly 
emerging countries are more limited and much 
less reliable than those in longer-established na- 
tions. 

b. Some of the more important types of records 
pertinent to Cl operations are : 

(1) Police and security agency records. 
Counterintelligence personnel must become thor- 
oughly familiar with the local records systems to 
insure that all pertinent files are checked in each 
instance. 

(2) Intelligence agency records. In many 
newly emerging nations, intelligence capabilities 
and operations are limited or confined to activi- 
ties which are primarily political in nature. Utili- 
zation of US intelligence personnel with fluency 
in the local language and having a related ethnic 
background is highly desirable. 

(3) Residence or family records. Normally 
these records are maintained by local police sta- 
tions. 

(4) Immigration and travel records. Such 
records may be incomplete, but they are of value 
to Cl operations. 



(5) Political and Religious Sources. Political 
organizations and religious sects, particularly in 
newly developing countries, will often operate in- 
telligence networks for their benefit. At times, a 
third country, such as the US, may be allowed ac- 
cess to information from these networks. Such in- 
formation, particularly on the insurgent, may be 
very accurate, but it must always be viewed as 
suspect since that organization may slant the in- 
formation for its furtherment. 

(6) Miscellaneous organizational records. 
Membership lists may be available. 

c. Efficient and effective Cl operations require 
the establishment and maintenance of a complete 
system of files and records on all known or sus- 
pected sympathizers of the insurgency movement. 
Variant spellings of local names must be cross- 
referenced. 

13—14. Use of Standard Procedures and 
Techniques 

Experience indicates that the procedures and 
techniques outlined in this manual are generally 
effective in all types of situations and environ- 
ments when used appropriately and with common 
sense. Every attempt must be made to use these 
procedures and techniques, adapting or modify- 
ing them when the situation so demands. Con- 
versely, the development of new techniques 
should be reported expeditiously (para 1-le) to 
permit appropriate expansion of doctrine. 
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CHAPTER 14 

INTERRELATIONSHIPS 



Section I. INTRODUCTION 



14—1. General 

a. In conventional combat operations, and espe- 
cially in stability operations, Cl elements must 
maintain particularly close coordination and liai- 
son with civil affairs (CA), psychological opera- 
tions (PSYOP), and military police (MP) ele- 
ments, as well as other friendly agencies in the 
area of operations. In many cases Cl elements 



work with those elements in joint operations to 
support the combat commander. 

b. Assistance is, as a rule, a two-way street ; Cl 
elements can provide CA, PSYOP, and MP ele- 
ments with information and assistance and they, 
in turn, can often furnish the same to Cl ele- 
ments. 



Section II. RELATIONSHIP WITH CIVIL AFFAIRS 



14—2. General 

A close working relationship and continuous co- 
ordination between CA and Cl units/elements are 
necessary at all levels of operation to provide for 
an exchange of information between the agencies. 

14—3. Coordination Procedures 

Policies for coordinating CA and MI efforts 
should be developed at the general staff level. 
Once policy is developed and coordinated, it 
should be promulgated in writing to all affected 
units to familiarize both MI and CA personnel 
with each other’s operations and responsibilities. 

14—4. Loyalties of Indigenous Personnel 

a. Counterintelligence and CA elements have a 
concurrent requirement to determine the loyalty 
of local officials in a conventional war situation in 
cases where agreements have not been made be- 
tween nations. This should be a continuously 
coordinated effort with mutual responsibilities 
and objectives. In stability or mid-intensity oper- 
ations this requirement may be modified by 
agreements such as a formal status of forces 
agreement. The control office, usually G2, will de- 
termine the scope of the Cl investigation to be 
performed or adhered to by third country investi- 
gative bodies in cases where the US retains the 
right to reject employees who do not meet speci- 
fied criteria. 



b. In a conventional war situation background 
investigations of indigenous labor personnel are 
considered a standard operational procedure and 
a CA requirement. Counterintelligence units, be- 
cause of their mission, are responsible for secur- 
ity investigations. Civil affairs operations require 
background investigations of a broad nature to 
determine suitability of indigenous personnel for 
positions of trust and responsibility or public as- 
sociation with US or allied military government. 
The objective of the background investigations is 
to minimize subversive and hostile infiltration 
into official or important positions through which 
the mission of the US Army would be hindered. 

c. In stability operations, identification of the 
insurgent subversion and infrastructure appa- 
ratus is a high priority target for the CA intellig- 
ence effort which has as its primary goal the 
reestablishment of civil order within the troubled 
country. 

14—5. Attitudes of Indigenous Personnel 

Attitudes of the indigenous population toward 
US troops is a primary area of concern, since CA 
operations are developed to create or exploit local 
attitudes. If this information is available to CA 
elements, it will assist Cl elements in the assess- 
ment of the area for Cl operations. If this infor- 
mation is not available to CA elements, Cl can be 
of assistance if it is well established in the area. 



14-1 





FM 30-17 



Counterintelligence elements must continuously 
monitor the populace for any changing attitudes 
that may be influenced through enemy coercion 
and subersive efforts. They must also work with 
CA on programs designed to counter and neutral- 
ize any hostile threat. In the early stages of an 
insurgency, Cl will orient its monitoring mission 
primarily on subversion, but this emphasis will 
gradually be reoriented toward espionage and 
sabotage if the insurgency moves into phases II 
and III. 

14—6. Procurement and Recruitment 

Direct support to intelligence collection agencies 
may be provided by CA units in the procurement 
of essential facilities and equipment and the re- 
cruitment of personnel. 

a. Procurement. In addition to normal CA pro- 
curement, CA personnel may also procure : 

(1) Biographical data on key persons in the 
civilian community or other identifying informa- 
tion essential to special operations. 

(2) Civilian clothing and items of normal 
personal possession. 

(3) Maps. 

(4) Civilian equipment such as binoculars, 
cameras, recording devices, and radios. 

(5) Documentary matter including pass- 
ports, visas, vehicle operator licenses, birth and 
marriage records. 

(6) Indigenous funds. 

(7) Foodstuffs, tobacco products, or alcoholic 
beverages peculiar to the area. 

(8) MEDCAP teams, water trailers, and like 
facilities to support cordon and search operations 
in stability operations. 

(9) Barter items. 

(10) Civilian motor vehicles, bicycles, or do- 
mestic animals. 

b. Recruitment. Through contact with civilian 
organizations, leaders, and political enemies of 
hostile governments, CA personnel can compile 
personnel rosters or spot possible enemy infiltra- 
tors for screening by Cl or PSYOP personnel for 
use as : 

(1) Interpreters. 

(2) Informants. 

(3) Counterintelligence special operations 
operatives. 



(4) Specialized craftsmen, technicians, or la- 
borers. 

14—7. Civil Security 

a. CA units provide maximum support to Cl 
elements in the detection and prevention of es- 
pionage, sabotage, subversion, guerrilla aid, and 
in other similar activities including the follow- 
ing: 

( 1 ) Identification of known or suspected hos- 
tile agents, collaborators, or sympathizers. 

(2) Prevention of local publication of infor- 
mation or opinions which are inimical to the mili- 
tary force. 

(3) Control of credit, foodstuffs, clothing, 
medical supplies, and related items which may be 
used to support guerrilla activities. 

(4) House-to-house searches for contraband 
which may yield persons, documents, or materiel 
of Cl interest. 

(5) Seizure and impounding of mail pending 
instructions for screening and disposition. 

(6) Conduct of searches for documents of in- 
telligence interest. 

(7) Placement of administrative surveillance 
and restrictions on the movement of persons sus- 
pected of collaborating with guerrilla forces. 

(8) Destruction, surveillance, or control of 
potential hiding places or shelter spots of dissi- 
dents, such as abandoned mines, caves, isolated 
rural buildings, haystacks or similar crop collec- 
tions. 

(9) Collection, evaluation, and interpretation 
of police statistics relating to insurgency crimes, 
such as the recurrence of acts of terrorism, which 
may relate to enemy sabotage, espionage, or sub- 
versive activities. 

b. While the close contacts and working rela- 
tionships between personnel from CA units and 
the civilian population provide valuable intellig- 
ence sources and material, CA units have a two- 
way potential since they not only serve friendly 
forces, but may provide an opportunity for ex- 
ploitation by unfriendly persons and groups. CA 
personnel must be particularly discreet in their 
dealings with the civilian population. Informa- 
tion provided civilians should be carefully 
screened, and indigenous persons and agencies 
should be kept under continuing surveillance for 
indications of disaffection. 
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14—8. Collection Potential of CA Personnel 

Civil affairs personnel in their day-by-day opera- 
tions deal with people, equipment, and documen- 
tary matter, all of which are primary sources of 
information of intelligence value. Normally, 
when persons with information of possible value 
are discovered, they are referred promptly to ap- 
propriate intelligence personnel fro exploitation. 
Those sources CA personnel are likely to locate 
include : 

a. Refugees, evacuees, and displaced persons 
who may be interned or otherwise come under 
CA control or sponsorship. 

b. Civilians who were associated with enemy 
personnel. 

c. Political enemies of the hostile regime. 

d. Leaders of fraternal, civic, religious, or pa- 
triotic organizations. 

e. Governmental documents, libraries, or ar- 
chives. 

/. Files of newspapers or periodicals. 

g. Industrial and commercial records. 

h. Persons employed in recreational areas. 

i. Political prisoners of the hostile regime. 



j. Technical equipment, blueprints, or plans. 

14—9. Other Civil Affairs Assistance 

Other supporting activities in which CA person- 
nel can make significant contributions to the Cl 
effort include : 

a. Collection of all types of intelligence infor- 
mation for use at different levels of command. 

b. Procurement. 

c. Recruitment. 

d. Assistance to counterintelligence personnel 
in the following activities : 

(1) Screening civilian officials. 

(2) Obtaining information pertaining to sab- 
otage. 

(3) Detecting the transmission of informa- 
tion and supplies to enemy forces, unfriendly par- 
tisans, or guerrillas through audits of supplies in 
warehouses, audits of controlled merchandise in 
stores, illegal activities, and routes of communi- 
cations. 

(4) Locating and detaining war criminals 
and enemy military personnel masquerading as 
civilians through contacts with the populace. 



Section III. RELATIONSHIP WITH MILITARY POLICE 



14—10. General 

Counterintelligence and MP units have many par- 
allel functions and responsibilities which, in some 
cases, may overlap; therefore, close coordination 
is essential for both units to be fully effective. 

14-11. Specific 

Counterintelligence and MP units have mutual 
interest in the following areas ; primary responsi- 
bility may be vested in either unit. 

a. Intelligence. Military Police develop police 
intelligence based on criminal and operational in- 
telligence. Criminal intelligence pertains to indi- 
viduals and organized crime activities while oper- 
ational intelligence pertains to security and other 
MP activities. Both Cl and MP units frequently 
will develop information of mutual interest 
which should be shared at the lowest practical 
level consistent with command policy on coordi- 
nation. 

b. Subversion. Military Police are concerned 



with the impact of organized crime on the war ef- 
fort as well as the ties top criminals might have 
with local political leaders, political parties, labor 
unions, legitimate businesses, and governmental 
agencies. 

c. Sabotage. Terrorism through sabotage is a 
criminal act as well as a coordinated enemy ef- 
fort. 

d. Refugee Screening. Military Police have con- 
trol and evacuation responsibilities and can, with 
the assistance of furnished indicators, assist Cl 
in spotting hostile intelligence, agents, saboteurs, 
subversives, and other dissident groups using the 
refugee and prisoner of war streams as a cover. 

e. Rear Area Security. Both MP and Cl ele- 
ments can develop offensive and defensive mea- 
sures in the ASCOM and TASCOM areas of the 
US Forces to deny the enemy information and 
materiel for hostile actions. 

/. Harbor Security. Military Police elements 
can either organize or conduct patrols, security 
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surveys, or surveillance of suspected criminal 
groups in harbor areas. 

g. Circulation Control. Military Police can de- 
vise registration and identification systems for 
the populace, set curfews, establish checkpoints, 
devise a pass system, and collect and analyze the 
modus operandi for criminal and hostile elements 
within the area of operation. 

h. Physical Security. Miliary Police set up 
physical security measures including but not lim- 
ited to the following: barriers, sentry dogs, 
alarm and anti-intrusion systems, guards, res- 
tricted areas, and perimeter lighting of key in- 
stallations. 

i. Border Security. Military Police are respon- 
sible for setting up anti-infiltration methods de- 
signed to keep the border secure from infiltration 
by enemy, neutral, and criminal elements. 

j. Civil Disturbances. Miliary Police develop 



police intelligence and practice mob, riot, and 
crime control measures during civil disturbances. 

k. Others. Many other areas exist, which would 
require coordination between MP and Cl ele- 
ments, such as espionage incident to the investi- 
gation of a crime, raids, or cordons and searches 
conducted jointly by MP and Cl for various pur- 
poses; and mobile and static checkpoints manned 
jointly for either MP control purposes or Cl spot 
checks for infiltrators. 

14-12. Reciprocal Intelligence 

The areas above indicate the extreme need for re- 
ciprocal intelligence and close coordination be- 
tween MP and Cl elements. For instance, the MP 
need intelligence on impending or actual refugee 
movements. This reciprocal intelligence can be 
obtained formally through staff elements or on a 
liaison type basis between operations officers or 
liaison personnel. 



Section IV. RELATIONSHIP WITH PSYCHOLOGICAL OPERATIONS 



14—13. General 

Psychological operations elements have assigned 
interrogators who gain information from pris- 
oners of war, detainees, or the local populace for 
attitude assessment and analysis, and target vul- 
nerability analysis. 

14—14. Specific 

Psychological operations are geared to assist the 
military effort in the following areas of Cl inter- 
est. 

a. Consolidation Operations are directed to- 
ward the populace of liberated or occupied areas 
to facilitate military operations and promote 
maximum cooperation. 

b. Populace and Resources Control includes the 
announcement and reasons for restrictions placed 
on the populace as well as education for such pro- 
grams as resettlement and clear and hold opera- 
tions. 

c. Reeducation is directed at prisoner of war 



and civilian detainees for the neutralization of 
their hostile attitudes and reorientation toward 
the US Forces. 

d. Area Estimates are necessary for the con- 
duct of PSYOP within an area of operations and 
will assist the Cl data base. 

e. Media Analysis is necessary for the discov- 
ery of clandestine subversive printing presses 
and other mass media, subversive activities 
within an area of operations. 

/. Black and Grey Propaganda consist of covert 
PSYOP which do not disclose their source of ori- 
gin. See FM 30-17 A for Cl aspects of these types 
of propaganda. 

g. Subversive Propaganda is of interest to CA, 
PSYOP, and Cl elements for the sake of planning 
countermeasures and can be a source of leads to 
Cl elements. 

h. Others. This includes objectives such as a 
nation building, cordon-and-search operational 
assistance, and the referral to Cl of individuals 
who have potential for Cl special operations. 



Section V. RELATIONSHIP TO OTHER INTELLIGENCE ELEMENTS 

14—15. General and security organizations, other elements en- 

gaged in classified activities may also use the ser- 
a. Since Cl units are charged with the overt li- vices of Cl elements to perform necessary liaison 
aison functions between local police, intelligence, activities. 
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b. Other MI elements can also assist Cl ele- 
ments in fulfilling their mission : 

(1) Imagery Interpretation (II). II elements 
can interpret imagery designed to confirm a 
source's information or furnish imagery designed 
for briefings and debriefings of sources. 

(2) Order of Battle (OB). OB personnel can 
keep the Cl element updated on changing unit 
designations, compositions, and dispositions. 



(3) Technical Intelligence (TI). TI person- 
nel can keep the Cl element advised on changes 
in equipment and equipment capabilities. 

(4) Signal Intelligence (SIGINT). SIGINT 
assists the Cl effort by deriving information from 
the intercept, direction finding, and analysis of 
enemy communications, including clandestine 
transmissions. Details on SIGINT support to Cl 
operations are contained in FM 32-1 (to be pub- 
lished). 
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